This server provides a runtime firewall to detect and block prompt injection attacks in AI agent pipelines, with tiered features and compliance attestation.

• Scan text for prompt injection (scan_prompt): Analyze any text (user prompts, RAG documents, tool arguments, or agent-to-agent payloads) for injection threats — returns a risk level (none, low, medium, high, critical), matched patterns, and a recommended action (allow, log, escalate, or block).

• Define custom detection rules (define_custom_rule): Create tenant-specific regex-based rules (Pro+ only) with configurable actions (block, escalate, or log) to tailor detection to your use case.

• List detection rules (list_rules): View all built-in and custom rules active for a specific tenant.

• View scan logs (scan_log): Retrieve recent scan history with optional filtering by risk level. Free tier is limited to the last 100 entries; Pro tier is unbounded.

• Generate signed attestations (sign_firewall_attestation): Emit a cryptographically signed report of firewall enforcement activity (total scans, blocks, escalations) over a specified time window — usable as compliance evidence for OWASP LLM01, EU AI Act Article 15, and ISO 42001 Annex A.5.

Enables scanning of prompts for injection attacks before they reach the LLM, with rule management and audit logging, integrated into Windsurf (Codeium).

1. Click on "Install Server".

2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.

3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Agent Prompt Injection Firewall MCP scan this message for prompt injection attempts"

That's it! The server will respond to your query, and you can continue using it as needed.

Here is a step-by-step guide with screenshots.