#prompt-injection

Runtime security oracle for AI agents — scan prompts, tool calls, and outputs before execution. Pay-per-call via x402/USDC, no accounts needed.

Diagnose MCP servers — health checks, tool testing, token cost audits, conflict detection, and security scanning with 50+ prompt injection patterns. Works as CLI or MCP server inside Claude Desktop.

Prompt injection and PII detection MCP server for AI agents. Deterministic, sub-25ms. Returns CLEARED/ANONYMIZED/BLOCKED verdict with matched signatures, PII entities, and GDPR Art.30 audit report. 2,000 free requests/month.

The first production MCP server with NIST FIPS 204 post-quantum receipts. Every AI agent tool call is policy-gated, hybrid-signed (Ed25519 + ML-DSA-65), and forensically provable — offline, forever. Fail-closed architecture: if the Trust Gate backend is unreachable, every decision returns allow:false. Defended against 15 CVEs including CVE-2026-25253 (OpenClaw), Invariant Labs Tool Poisoning, and Salt Typhoon HNDL. EU AI Act Article 50 native compliance.

Japanese LLM security APIs — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free to start, no credit card required.

Adaptive security toolkit for AI agents. Assess inputs for prompt injection, scan outputs for credential/PII leaks, teach new attack patterns to semantic memory, harden prompts with role-lock and sandboxing, and monitor metrics — all locally via MCP. Zero false positives on benchmarks, 179 tests, Apache-2.0.

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

Scan OpenClaw SKILL.md and MCP tool definition files for security vulnerabilities. 22 rules across prompt injection, capability escalation, data exfiltration, encoded payloads, and composition risks. The only scanner targeting agent skill file formats.

Scan MCP servers for security risks before your AI agent trusts them. Detects prompt injection, supply chain attacks (including the LiteLLM 1.82.7/1.82.8 backdoor), excessive permissions, arbitrary code execution, typosquatting, and tool shadowing. Add to your .mcp.json and let your agent audit its own tools with tooltrust_scan_config.

Bidirectional DLP scanning for every MCP tool call — secrets, PII, prompt injection, and malicious code caught in both directions. Route all your agents (Claude, ChatGPT, Gemini, Cursor) through one endpoint with unified audit logging. Memory Vault for persistent cross-agent context. Bug Vault with 8.6M+ coding patterns across 48 languages. Free tier with 1,000 requests/day. Team RBAC and tool-level DLP policies coming March 2026.

Free AI security & productivity tools — prompt injection tester, PII redactor, code sanitizer, context budget planner, model picker, and more. 6 tools available via MCP, all stateless and no auth required.

AI-native security tools via MCP. Prompt injection detection (208 patterns, 8 languages, <100ms), skill supply chain scanning (204 patterns, 8 risk categories), plus URL/domain/IP/email/password checks. Pay-per-request with USDC via x402 — no API keys needed. 9 tools, demo mode included.

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

High-performance MCP server for USPTO Patent File Wrapper API with secure document downloads, metadata access, and context reduction

High-performance MCP server for USPTO Patent Trial and Appeal Board (PTAB) with context reduction, progressive disclosure workflows, and seamless cross-MCP integration