io.github.viridis-security/injection-detector

repo:https://github.com/viridis-security/mcp-services-sdk

Formally-verified injection/exfiltration detector for AI agents (MCP-02).

transport:: remote
credential class:: self-provisionable
repo:: https://github.com/viridis-security/mcp-services-sdk

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

detect_injection
Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probability, bits-at-risk (upper bound on adversarial capture per the Adversarial Landauer bound), matched canon patterns, and a recommended action (allow|sanitize|reject|escalate). Backed by Aristotle-verified theorems T-IB-02/T-IB-06/T-IB-01.
shallow
detect_trace_tool_policy
Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Returns trace counts, unauthorized tool-call evidence, canon mapping VC-AI-TOOL-0001, and claim-boundary guardrails. Backed by T-IB-25/T-IB-29/T-IB-36.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/1b6bf35b-44bd-4544-9315-8ec6ad954eef/badge.svg)](https://vouch.tools/servers/1b6bf35b-44bd-4544-9315-8ec6ad954eef)