Skip to main content
Glama

Server Details

Prompt-injection Guard checks and public AI red-teaming arena data from Heisto on Solana.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
heisto-dev/heisto-mcp
GitHub Stars
0
Server Listing
Heisto MCP
ChatGPT
–
Claude
–

TDQS

B3.3/5.0

Scored across 5 tools

Disambiguation4/5

Each tool targets a distinct resource or purpose: config, a single sentinel, a sentinel list, settled verdicts, and a text filter. The closest pair is get_sentinel vs list_sentinels, but the standard verb/noun split keeps them clearly separable. guard_check is orthogonal to the arena read surface but its purpose is unambiguous.

Naming Consistency3/5

Three tools use verb_noun (get_sentinel, list_sentinels, guard_check) while two use bare noun compounds (arena_config, recent_attempts), so read operations aren't signaled by a consistent pattern. Names are still readable and snake_case throughout, but the convention is mixed.

Tool Count4/5

Five tools is well-scoped for a public read surface plus one safety filter, with no redundant entries. It sits at the lean end, and a single detail-read tool for attempts would round it out.

Completeness3/5

The read side covers config, sentinel listing/lookup, and settled verdicts, but there is no way to fetch a single attempt in detail or filter attempts by sentinel, and no submission path if arena participation is in scope. Agents can read the public state but hit dead ends on per-record drill-down.

Available Tools

5 tools
arena_configA
Read-onlyIdempotent
Inspect

Read public Mainnet pool limits, fee split, breach rule and refund delay.

Inputs: no named parameters.

get_sentinelA
Read-onlyIdempotent
Inspect

Read a public Sentinel objective and public instructions. Never private instructions.

Inputs: id (required).

guard_checkA
Read-onlyIdempotent
Inspect

Check text for prompt-injection patterns. A first filter, not a safety guarantee.

Inputs: text (required).

list_sentinelsA
Read-onlyIdempotent
Inspect

List public Mainnet Sentinels or unfunded practice templates.

Inputs: network.

recent_attemptsC
Read-onlyIdempotent
Inspect

Read settled public verdicts with shortened wallets. Never raw prompts.

Inputs: sentinelId (required), limit.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.