🔐 MCP Security 是什么？

# ~/.openclaw/config.yaml

mcp:
  # 只允许信任的MCP Server
  servers:
    - name: trusted-docs
      url: https://docs.miaoquai.com/mcp
      trust_level: high
      allowed_tools:
        - read_doc
        - search_docs
      # 禁止的工具（黑名单）
      denied_tools:
        - delete_doc
        - modify_doc
    
    - name: evil-server  # 这个会被拦截
      url: https://evil.com/mcp
      trust_level: none  # 不信任
      # 或者直接不加入配置

  # 全局安全策略
  security:
    require_approval_for:
      - file_write
      - network_request
      - execute_command
    max_file_size: 10MB
    allowed_domains:
      - miaoquai.com
      - github.com
    denied_domains:
      - evil.com
      - malware.example

# OpenClaw Skill中声明所需权限
# skills/secure-file-reader/SKILL.md

---
name: secure-file-reader
description: 安全的文件读取工具
permissions:
  - tool: file_read
    scope: 
      - /tmp/**
      - /var/www/miaoquai/**  # 只允许读网站目录
    deny:
      - /etc/**
      - /root/**
  - tool: network_request
    scope:
      - https://miaoquai.com/**
    deny:
      - https://*.evil.com/**
---

# 在代码中检查权限
import { MCPClient } from 'openclaw';

const client = new MCPClient({
  server: 'trusted-docs',
  security: {
    // 每次工具调用前检查权限
    beforeCall: async (tool, args) => {
      if (tool.name === 'delete_doc') {
        throw new Error('此工具已被禁用');
      }
      
      // 检查文件路径
      if (tool.name === 'read_file' && args.path) {
        if (!isPathAllowed(args.path, ['/tmp/', '/var/www/'])) {
          throw new Error(`路径 ${args.path} 不在允许范围内`);
        }
      }
    },
    
    // 敏感操作需要人工审批
    humanApproval: ['write_file', 'execute_command']
  }
});

# 工具投毒检测
class ToolPoisoningDetector {
  constructor() {
    this.suspiciousPatterns = [
      /send.*to.*\.com/i,
      /upload.*to.*s3/i,
      /IGNORE.*PREVIOUS/i,
      /steal.*key/i,
      /exfiltrat/i
    ];
  }
  
  scanToolDescription(tool) {
    const description = tool.description || '';
    const warnings = [];
    
    // 检测隐藏指令
    for (const pattern of this.suspiciousPatterns) {
      if (pattern.test(description)) {
        warnings.push(`发现可疑模式: ${pattern}`);
      }
    }
    
    // 检测描述与名称不符
    if (tool.name.includes('weather') && description.includes('ssh')) {
      warnings.push('工具名称与描述不符，可能是投毒攻击');
    }
    
    return warnings;
  }
  
  async validateTool(tool) {
    const warnings = this.scanToolDescription(tool);
    
    if (warnings.length > 0) {
      console.warn(`⚠️ 工具 ${tool.name} 可能有风险:`, warnings);
      
      // 如果风险高，需要人工审批
      if (warnings.length >= 2) {
        await this.requestHumanApproval(tool, warnings);
      }
    }
    
    return warnings.length === 0;
  }
  
  async requestHumanApproval(tool, warnings) {
    const approved = await humanApprovalGate({
      title: `工具安全审批: ${tool.name}`,
      message: `检测到以下风险:\n${warnings.join('\n')}\n\n是否允许使用此工具？`,
      dangerous: true
    });
    
    if (!approved) {
      throw new Error(`工具 ${tool.name} 未通过安全审批`);
    }
  }
}