Skip to main content
Glama

Imperium MCP Security — Prompt-Injection, Jailbreak & Tool Poisoning Firewall

Server Details

Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.

Ownership verified
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
robertoyanguas-ops/assay
GitHub Stars
0
ChatGPT
–
Claude
–

TDQS

A4.2/5.0

Scored across 2 tools

Disambiguation4/5

The two tools are functionally distinct: one reads wallet/billing state and the other scans text for prompt injections, so an agent is unlikely to confuse them. However, the descriptions are bloated and refer to 'the other tools on this server for execution' and 'use get_agent_wallet_status to check...', implying a broader toolset that does not exist, which adds avoidable confusion.

Naming Consistency4/5

Both names use a snake_case verb_object pattern (get_agent_wallet_status, scan_prompt_injection), which is readable and fairly consistent. The verbs differ slightly in structure (get vs scan) but this is a minor deviation rather than a real inconsistency.

Tool Count2/5

Only two tools exist, and one of them is a billing/quota-status helper rather than a security capability. For a server branding itself as a prompt-injection, jailbreak, and tool-poisoning firewall, this is far too thin a surface to earn its stated scope.

Completeness2/5

The server advertises jailbreak and tool-poisoning protection, yet only scan_prompt_injection performs any detection and there are no tools for jailbreak checks, tool-poisoning inspection, or sanitization configuration. The only other tool is ancillary billing status, leaving major advertised capabilities uncovered.

Available Tools

2 tools
get_agent_wallet_statusA
Read-onlyIdempotent
Inspect

Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')

Inputs: agent_id. Returns: data, status, roi_proof

scan_prompt_injectionA
Read-onlyIdempotent
Inspect

Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. WHEN TO USE: Call scan_prompt_injection when your task requires deterministic prompt-guard analysis for text; use get_agent_wallet_status to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target text as a non-empty string; omit agent_id and tx_hash during your 5 free trial calls, or supply agent_id (agd_pass_...) / tx_hash for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.005 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_prompt_injection(text='example')

Inputs: text (required), tx_hash, agent_id. Returns: data, status, roi_proof

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • F
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables autonomous AI agents and MCP-compliant clients to detect and block adversarial prompt injections, jailbreak attempts, system prompt exfiltration, and tool hijacking via a zero-dependency, sub-millisecond heuristic firewall.
      1
      -
    • A
      license
      Not graded
      quality
      D
      maintenance
      A defensive gateway and firewall for AI agents using MCP servers, scanning tool calls, responses, and manifests for prompt injection, secrets, dangerous commands, and drift before allowing execution.
      MIT
    • F
      license
      Not graded
      quality
      B
      maintenance
      Enables deterministic detection and neutralization of adversarial prompt injections and override attempts in AI agent workflows via a zero-dependency MCP server, providing structured telemetry and low-latency validation.
      8
      -
    • A
      license
      Not graded
      quality
      D
      maintenance
      A multi-agent AI security layer that protects LLMs from prompt injection, jailbreaks, and policy violations via MCP tools.
      76 PyPI
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.