Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HASHBUILDS_API_URL | No | Override the API base URL (default: https://hashbuilds.com/api/secure-prompts). For local development, use http://localhost:3001/api/secure-prompts | https://hashbuilds.com/api/secure-prompts |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| register_secure_prompt | Register a prompt with HashBuilds Secure Prompts for security verification and get embed options. This uses AI to scan the prompt for injection attacks, hidden instructions, data exfiltration, jailbreak attempts, and other security issues. Returns multiple display options (full badge, compact link, icon button) with implementation guidance. After registering, ASK THE USER which display option they prefer before implementing. The response includes an implementationGuide field with detailed instructions for styling and placement. |
| verify_secure_prompt | Verify an existing secure prompt by its ID. Returns the security scan results, risk level, and verification status. |
| get_embed_code | Generate HTML and React embed code for displaying a secure prompt badge. Use this after registering a prompt to get the code to add to your website. |
| audit_prompts | Analyze a list of prompts found in a codebase and categorize them as user-facing (needs badge) or internal (audit only). This tool helps users who already have prompts in their codebase understand which ones should be registered with secure badges vs which are internal-only. HOW TO USE:
|
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |