@orcatrac/cli

AI agent security proxy — intercepts MCP tool calls in real time and enforces your policy (allow / warn / block) before they execute.

Install

npm install -g @orcatrac/cli

Requires Node.js ≥ 18.

Quick start

# 1. Connect your OrcaTrac account
orcatrac init

# 2. Patch Claude Desktop to route through the proxy
orcatrac inject

# 3. Restart Claude Desktop, then watch events live
orcatrac logs

How it works

orcatrac inject rewrites your claude_desktop_config.json so every MCP server is wrapped by orcatrac run. When an AI agent calls a tool, the proxy intercepts the call, sends it to the OrcaTrac API for a risk assessment, and then either allows it through, logs a warning, or blocks it — depending on your configured policy mode.

Claude Desktop → orcatrac run <mcp-server> → OrcaTrac API → (allow / warn / block)

Commands

orcatrac init

Interactive setup wizard. Saves your credentials and policy to ~/.orcatrac/config.json.

API key:       <your OrcaTrac API key>
API URL:       https://orcatrac.com  (default)
Policy mode:   warn | allow | block  (default: warn)

Policy modes:

| Mode | Behaviour | | ------- | ------------------------------------------------------ | | allow | Log every call, never block | | warn | Log every call, flag risky ones — but still allow them | | block | Log every call, block calls OrcaTrac marks as risky |

orcatrac inject

Patches claude_desktop_config.json to route all existing MCP servers through the proxy. Safe to re-run — already-patched servers are skipped.

Supported platforms: macOS, Linux, Windows.

orcatrac inject
# → Patched: filesystem
# → Patched: github
# ✓ Patched 2 server(s). Restart Claude Desktop to apply.

orcatrac run <mcpCommand...>

Spawns an MCP server with the OrcaTrac proxy in front of it. You don't normally need to call this directly — orcatrac inject sets it up automatically.

# Example (injected automatically):
orcatrac run npx @modelcontextprotocol/server-filesystem /home/user

orcatrac logs

Tails ~/.orcatrac/calls.log in real time. Shows the last 20 historical events on startup, then streams new ones as they arrive.

10:42:01  ALLOW  LOW     read_file
10:42:05  WARN   MEDIUM  write_file
10:42:09  BLOCK  HIGH    delete_file

Press Ctrl+C to stop.

orcatrac status

Prints your current configuration and log stats.

OrcaTrac status

✓ Configured
  API URL:  https://orcatrac.com
  API key:  sk-orcatrac-1234…
  Mode:     warn
  Log:      42 events (3.1 KB)

Configuration file

~/.orcatrac/config.json — created by orcatrac init, editable by hand.

{
  "apiKey": "your-api-key",
  "apiUrl": "https://orcatrac.com",
  "mode": "warn"
}

License

MIT