Security Preflight

Working · 3.1 s

io.github.jdhart81/security-preflightv1.3.1

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

Security

Source Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://mcp.viridis-security.com/security-preflight/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

describe_agent Read-only

Describe scope, evidence boundary, inputs, and outputs.

This tool takes no arguments.

Tools (5)

describe_agent

Describe scope, evidence boundary, inputs, and outputs.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "title": "describe_agentArguments",
  "properties": {}
}

get_security_receipt

Read an unsigned, filtered public view; retain original delivery for signature verification.

read-only

Argument	Type	Description
receipt_id*	string

Input schema (JSON)

{
  "type": "object",
  "title": "get_security_receiptArguments",
  "required": [
    "receipt_id"
  ],
  "properties": {
    "receipt_id": {
      "type": "string",
      "title": "Receipt Id"
    }
  }
}

scan_source

$1 bounded inline VulnCanon source scan; indicators, not proven exploits. Direct MCP requires the checkout caller and verified fixed-order session. At most 64 KiB, 2000 lines, 4096 characters per line. No model calls, repository fetching or code execution. Returns a redacted signed receipt.

Argument	Type	Description
source*	string
agent_id*	string
session_id	any

Input schema (JSON)

{
  "type": "object",
  "title": "scan_sourceArguments",
  "required": [
    "agent_id",
    "source"
  ],
  "properties": {
    "source": {
      "type": "string",
      "title": "Source"
    },
    "agent_id": {
      "type": "string",
      "title": "Agent Id"
    },
    "session_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Session Id",
      "default": null
    }
  }
}

screen_injection

$1 batch of 1–20 text samples screened for deterministic injection markers. Direct MCP requires the checkout caller and verified fixed-order session. Maximum 64 KiB total. Heuristic indicators, not calibrated probabilities or a guarantee of safety. No model calls or automatic follow-on purchase.

Argument	Type	Description
texts*	array
agent_id*	string
session_id	any

Input schema (JSON)

{
  "type": "object",
  "title": "screen_injectionArguments",
  "required": [
    "agent_id",
    "texts"
  ],
  "properties": {
    "texts": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "title": "Texts"
    },
    "agent_id": {
      "type": "string",
      "title": "Agent Id"
    },
    "session_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Session Id",
      "default": null
    }
  }
}

security_preflight

Run a $1 static Security Preflight and return a signed receipt. Direct MCP requires the checkout caller and verified fixed-order session. The separate x402 HTTP rail retains its existing introductory quote policy. No deployed endpoint is fetched or tested. Importing the receipt into an Agent Market profile is a separate, explicit action.

Argument	Type	Description
policy	any
agent_id*	string
manifest*	object
request_id	any
session_id	any
payment_ref	any
sample_inputs	any
subject_profile_sha256	any

Input schema (JSON)

{
  "type": "object",
  "title": "security_preflightArguments",
  "required": [
    "agent_id",
    "manifest"
  ],
  "properties": {
    "policy": {
      "anyOf": [
        {
          "type": "object",
          "additionalProperties": true
        },
        {
          "type": "null"
        }
      ],
      "title": "Policy",
      "default": null
    },
    "agent_id": {
      "type": "string",
      "title": "Agent Id"
    },
    "manifest": {
      "type": "object",
      "title": "Manifest",
      "additionalProperties": true
    },
    "request_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Request Id",
      "default": null
    },
    "session_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Session Id",
      "default": null
    },
    "payment_ref": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Payment Ref",
      "default": null
    },
    "sample_inputs": {
      "anyOf": [
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        {
          "type": "null"
        }
      ],
      "title": "Sample Inputs",
      "default": null
    },
    "subject_profile_sha256": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Subject Profile Sha256",
      "default": null
    }
  }
}