Schema | Agent Prompt Injection Firewall MCP

Agent Prompt Injection Firewall MCP

Describes the environment variables required to run the server.

Name	Required	Description	Default
No arguments

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{ "listChanged": false }
`prompts`	{ "listChanged": false }
`resources`	{ "subscribe": false, "listChanged": false }
`experimental`	{}

Functions exposed to the LLM to take actions

Name	Description
scan_promptA	Scan a piece of text for prompt injection. Returns full decision trace. context: where this text came from (user-prompt \| rag-document \| tool-arg \| a2a-payload) Returns `safe`, `risk_level` (none\|low\|medium\|high\|critical), `patterns_matched` (list of rule hits), and `recommended_action` (allow \| log \| escalate \| block).
define_custom_ruleC	Define a tenant-specific detection rule. Pro+ only. pattern: regex (case-insensitive) action: block \| escalate \| log
list_rulesC	List built-in + custom rules (if tenant_id provided).
scan_logC	Recent scan log. Pro tier: unbounded. Free tier: last 100.
sign_firewall_attestationC	Emit a signed attestation of firewall enforcement. Evidence for OWASP LLM01 + EU AI Act Art 15 (cybersecurity) + ISO 42001 Annex A.5 (security).

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/agent-prompt-injection-firewall-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server