Imperium MCP Security — Prompt-Injection, Jailbreak & Tool Poisoning Firewall
Server Details
Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- robertoyanguas-ops/assay
- GitHub Stars
- 0
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 2 tools
The two tools are functionally distinct: one reads wallet/billing state and the other scans text for prompt injections, so an agent is unlikely to confuse them. However, the descriptions are bloated and refer to 'the other tools on this server for execution' and 'use get_agent_wallet_status to check...', implying a broader toolset that does not exist, which adds avoidable confusion.
Both names use a snake_case verb_object pattern (get_agent_wallet_status, scan_prompt_injection), which is readable and fairly consistent. The verbs differ slightly in structure (get vs scan) but this is a minor deviation rather than a real inconsistency.
Only two tools exist, and one of them is a billing/quota-status helper rather than a security capability. For a server branding itself as a prompt-injection, jailbreak, and tool-poisoning firewall, this is far too thin a surface to earn its stated scope.
The server advertises jailbreak and tool-poisoning protection, yet only scan_prompt_injection performs any detection and there are no tools for jailbreak checks, tool-poisoning inspection, or sanitization configuration. The only other tool is ancillary billing status, leaving major advertised capabilities uncovered.
Available Tools
2 toolsget_agent_wallet_statusARead-onlyIdempotentInspect
Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')
Inputs: agent_id. Returns: data, status, roi_proof
scan_prompt_injectionARead-onlyIdempotentInspect
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. WHEN TO USE: Call scan_prompt_injection when your task requires deterministic prompt-guard analysis for text; use get_agent_wallet_status to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target text as a non-empty string; omit agent_id and tx_hash during your 5 free trial calls, or supply agent_id (agd_pass_...) / tx_hash for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.005 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_prompt_injection(text='example')
Inputs: text (required), tx_hash, agent_id. Returns: data, status, roi_proof
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool argume...
Security scanner for AI agents and MCP servers: injection, jailbreak, tool abuse.
AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.
Related MCP Servers
- FlicenseNot gradedqualityNot gradedmaintenanceEnables autonomous AI agents and MCP-compliant clients to detect and block adversarial prompt injections, jailbreak attempts, system prompt exfiltration, and tool hijacking via a zero-dependency, sub-millisecond heuristic firewall.1-
- AlicenseNot gradedqualityDmaintenanceA defensive gateway and firewall for AI agents using MCP servers, scanning tool calls, responses, and manifests for prompt injection, secrets, dangerous commands, and drift before allowing execution.MIT
- FlicenseNot gradedqualityBmaintenanceEnables deterministic detection and neutralization of adversarial prompt injections and override attempts in AI agent workflows via a zero-dependency MCP server, providing structured telemetry and low-latency validation.8-
- AlicenseNot gradedqualityDmaintenanceA multi-agent AI security layer that protects LLMs from prompt injection, jailbreaks, and policy violations via MCP tools.76 PyPIMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.