prompt-protection MCP
An open-source npm package that inspects text before it reaches your model and inspects the model's response before it reaches your user. It runs in-process with zero runtime dependencies, normalizing input to detect prompt injection, jailbreaks, and data exfiltration. It also acts as a tool-call guard for JavaScript agents, ensuring tainted tool results never reach dangerous sinks like network, email, exec, file, or payment endpoints.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan prompts and tool definitions for injection attacks
- Guard agent tool calls to prevent untrusted data reaching sinks
- Detect leaked system prompts and exposed credentials in model output
- Prevent indirect injection from documents or tool responses
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
prompt-protection 4.3.0
{
"version": "4.3.0",
"transport": "stdio",
"identifier": "prompt-protection",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"prompt-protection-mcp": {
"command": "npx",
"args": [
"-y",
"prompt-protection@4.3.0"
]
}
}
}Cline
{
"mcpServers": {
"prompt-protection-mcp": {
"command": "npx",
"args": [
"-y",
"prompt-protection@4.3.0"
]
}
}
}VS Code
{
"servers": {
"prompt-protection-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"prompt-protection@4.3.0"
]
}
}
}Claude Desktop
{
"mcpServers": {
"prompt-protection-mcp": {
"command": "npx",
"args": [
"-y",
"prompt-protection@4.3.0"
]
}
}
}Let your agent find its tools
Find servers like prompt-protection MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.