Return the last n records from a JSONL audit log.

Use when: "what did the agent just do?", "did anything fail?". Example: path="/var/log/mcp-shield/audit.jsonl", n=50.

Aggregate counts over a JSONL audit log: total calls, error rate, top tools.

Use when: "how healthy is the MCP fleet?", "what's the error rate?". Example: path="/var/log/mcp-shield/audit.jsonl".

Run a curated set of injection payloads through the sanitizer.

Use when: "is the sanitizer actually catching things?", "compliance evidence for security review". Example: strict=False (default; reports hits without raising).

Each result row shows {"input", "caught", "pattern"}. caught is True iff the sanitizer matched any pattern.

Validate an args dict against a JSON schema; return OK or first error.

Use when: "is my agent's call valid before I send it?". Example: args={"q":"hi"}, schema={"type":"object","properties":{"q":{"type":"string"}}}.

Returns {"valid": true} or {"valid": false, "error": "..."}. Never raises — the tool surfaces validation results as data.

List the prompt-injection patterns the sanitizer detects.

Use when: "what does this tool actually look for?".

Preview what the sanitizer would do to text without raising.

Use when: "what gets redacted from this output?". Example: text="ignore previous instructions", strict=False.

Return mcp-shield version + runtime config.

Use when: "what version is deployed?".