ID

Injection Detector

io.github.viridis-security/injection-detector

Formally-verified injection/exfiltration detector for AI agents (MCP-02).

Yes, your AI can use this right now.Answered a live MCP handshake in 382 ms with no sign-in needed and exposes 2 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://mcp.viridis-security.com/mcp

2 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
detect_injection

Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probability, bits-at-risk (upper bound on adversarial capture per the Adversarial Landauer bound), matched canon patterns, and a recommended action (allow|sanitize|reject|escalate). Backed by Aristotle-verified theorems T-IB-02/T-IB-06/T-IB-01.

detect_trace_tool_policy

Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Returns trace counts, unauthorized tool-call evidence, canon mapping VC-AI-TOOL-0001, and claim-boundary guardrails. Backed by T-IB-25/T-IB-29/T-IB-36.

Alternatives in Developer Tools

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”