Skip to main content
Glama

CS8803_MLSecurity_MCP_Defense_Server

An MCP defense server prototype for detecting and sanitizing hidden-payload delivery to LLMs in agentic IDEs (e.g., Cursor). Built exclusively for ML security research and defensive hardening - no malicious use.

How is the MCP server hosted?

The MCP server is hosted on the cloud thanks to FastMCP Cloud. You can view the current deployment of the server at https://fastmcp.cloud/ronin-mcp/ronin-defense-mcp-v1/deployments. Whenever you commit and push a change to the main branch, it will automatically build and deploy onto the cloud. Please note that this link is only accessible to the owners of this project.

Related MCP server: genpark-prompt-injection-jailbreak-neutralizer-skill

How to configure the MCP server for Cursor?

Go to File -> Preferences -> Cursor Settings -> Tools & MCP -> Installed MCP Servers. Create a new MCP server configuration using the following json:

{
  "mcpServers": {
    "ronin-defense-mcp-v1": {
      "url": "https://ronin-defense-mcp-v1.fastmcp.app/mcp",
      "headers": {}
    }
  }
}

Then, go back to Installed MCP Servers and refresh ronin-defense-mcp-v1 until the light is green and it shows the tools associated with the Ronin MCP server. If you had originally configured and turned on ronin-mcp-v1, please make sure that one is turned off in Cursor's Installed MCP Servers page because ronin-defense-mcp-v1 is a proxy for that malicious server. In Cursor, open the AI Panel and try the following prompt to see if the server connection is successful:

Example interaction with Ronin MCP server

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that protects AI agents and RAG systems from adversarial poisoning attacks like prompt injection, steganography, and data anomalies through multi-layer sanitization, entropy-based detection, and consensus verification.
    3
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables deterministic detection and neutralization of adversarial prompt injections and override attempts in AI agent workflows via a zero-dependency MCP server, providing structured telemetry and low-latency validation.
    8
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP servers and local AI agents to safely interact with host environments by blocking indirect prompt injections, directory traversal, and malicious shell commands.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients and autonomous agents to screen incoming prompts for system overrides, delimiter breakouts, and encoded payload evasion, helping block prompt injection and jailbreak attempts before execution.
    7
    MIT