SP

Security Preflight

io.github.jdhart81/security-preflight

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

Yes, your AI can use this right now.Answered a live MCP handshake in 395 ms with no sign-in needed and exposes 5 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://mcp.viridis-security.com/security-preflight/mcp

5 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
security_preflight

Run a $1 static Security Preflight and return a signed receipt. Direct MCP requires the checkout caller and verified fixed-order session. The separate x402 HTTP rail retains its existing introductory quote policy. No deployed endpoint is fetched or tested. Importing the receipt into an Agent Market profile is a separate, explicit action.

scan_source

$1 bounded inline VulnCanon source scan; indicators, not proven exploits. Direct MCP requires the checkout caller and verified fixed-order session. At most 64 KiB, 2000 lines, 4096 characters per line. No model calls, repository fetching or code execution. Returns a redacted signed receipt.

screen_injection

$1 batch of 1–20 text samples screened for deterministic injection markers. Direct MCP requires the checkout caller and verified fixed-order session. Maximum 64 KiB total. Heuristic indicators, not calibrated probabilities or a guarantee of safety. No model calls or automatic follow-on purchase.

get_security_receiptread-only

Read an unsigned, filtered public view; retain original delivery for signature verification.

describe_agentread-only

Describe scope, evidence boundary, inputs, and outputs.

Alternatives in Developer Tools

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”