2alf/Heimdall

Windows prebuilt .msi/.exe from GitHub Releases
git clone https://github.com/2alf/Claude-Defender && cd Claude-Defender/claudeDefender-tauri && npm run setup && npm run tauri build

Usage

• •Run 'heimdall watch' for always-on headless monitoring (~8 MB, no GUI) or open the desktop GUI to review
• •Use heimdall check (exit 0 clean / 1 changes / 2 tamper), then heimdall accept | revert, heimdall quarantine <server>, heimdall report
• •The baseline is anchored by a keyed BLAKE3 MAC whose key lives in the OS keystore (Credential Manager / Keychain / Secret Service), so it can't be silently forged
• •Hosts are watched only if their config exists; re-scan picks up hosts installed later

Key features

• ✓Real-time BLAKE3 fingerprinting of each host's config and every server's source tree (including imported modules and lockfiles)
• ✓Keystore-anchored baseline that can't be forged - a missing or deleted baseline after setup is treated as tampering
• ✓Intrusion analysis mining Claude's mcp-info.json and mcp-server-*.log into per-server timelines (recently-added, error-spikes, orphans)
• ✓Quarantine for suspect servers and exportable Markdown/JSON audit reports
• ✓Headless CLI shares the same engine as the GUI

Best for

Detecting and reverting living-off-the-land tampering of local MCP configs/server files for Claude Desktop, Claude Code, Cursor, Windsurf and LM Studio

Caveats

• ⚠Only Windows has prebuilt (unsigned) installers - SmartScreen will warn; macOS/Linux must build from source and the Keychain/Secret Service paths are implemented but not yet verified
• ⚠The binary currently ships as claude-defender-cli; 'heimdall' is the rename target
• ⚠A detective, tamper-evident warning control, not a wall - not tamper-proof against code-execution as your user and not an antivirus/sandbox
• ⚠GPL-3.0 licensed