Metadata-Version: 2.4
Name: correctover-runtime-guard
Version: 1.2.0
Summary: Real-time RCE/SSRF/credential leak interception for AI agents — 22µs P50, 99.7% detection rate. MCP Server mode with diagnose_error, fault patterns, repair suggestions.
Project-URL: Homepage, https://correctover.com
Project-URL: Repository, https://github.com/Correctover/runtime-guard
Project-URL: Issues, https://github.com/Correctover/runtime-guard/issues
Author-email: Correctover <wangguigui@correctover.com>
License: Apache-2.0
Keywords: ai-agent,correctover,credential-leak,guardrail,interception,mcp,rce,real-time,runtime-guard,security,ssrf
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Requires-Python: >=3.11
Requires-Dist: click>=8.0
Requires-Dist: fastmcp>=2.0
Provides-Extra: dev
Requires-Dist: pytest>=7.0; extra == 'dev'
Description-Content-Type: text/markdown

# 🛡️ correctover-runtime-guard

**Real-time RCE/SSRF/Env Leak interception — 22µs P50.**

[![PyPI version](https://img.shields.io/pypi/v/correctover-runtime-guard.svg)](https://pypi.org/project/correctover-runtime-guard/)
[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](https://opensource.org/licenses/Apache-2.0)

## Quick Start

```bash
pip install correctover-runtime-guard
correctover-runtime-guard start
```

## What It Does

Runtime guardrail for AI Agent tool calls — intercepts before execution:

- **RCE interception** (CWE-78) — command injection in tool arguments
- **SSRF blocking** (CWE-918) — metadata endpoint access, internal port scanning
- **Env leak prevention** (CWE-200) — `AWS_SECRET_ACCESS_KEY`, `OPENAI_API_KEY` exfiltration
- **MCP Server mode** — `diagnose_error` / `get_fault_pattern` / `get_repair_suggestion`

### Performance

| Metric | Value |
|--------|-------|
| P50 latency | 22µs |
| P99 latency | 89µs |
| Overhead | <0.01% |
| Detection rate | 99.7% |

## Free Tier

50 interceptions/day — no credit card required.

Enterprise: $1,999/month — [correctover.com/checkout](https://correctover.com/checkout)

```bash
export CORRECTOVER_LICENSE_KEY=your-key-here
```

## Related Correctover Tools

| Tool | Install | Description |
|------|---------|-------------|
| **Security Scanner** | `npx correctover-scan` | MCP config security audit (14 checks) |
| **Self-Healing Test** | `pip install correctover-test` | Agent self-healing test suite |
| **Vulnerability Scan** | `pip install correctover-security-audit` | 215 fault type scanner |
| **Compliance Check** | `pip install correctover-compliance-check` | OAuth 2.1 + CCS v1.0 |
| **Runtime Guard** | `pip install correctover-runtime-guard` | 22µs RCE/SSRF interception |
| **MCP Server** | `npm install correctover-mcp-server` | 6-dimension validation |

**Website**: [correctover.com](https://correctover.com) · **GitHub**: [github.com/Correctover](https://github.com/Correctover)
