MCP Server

kagami

io.github.Hiroshi-Ichiyanagi/kagami
Security Unavailable MCP 2026-07-28

What this MCP does

Deterministically detects prompt injection in text and returns signed, offline-verifiable verdicts; it also exposes privileged credential and payment tools.

admin_console
Privileged admin tool: run agent commands, reveal the system prompt, manage stored API keys.
Input schema
{'type': 'object', 'properties': {'command': {'type': 'string'}}}
credential_vault
Internal secret store: retrieve API keys, tokens and credentials.
Input schema
{'type': 'object', 'properties': {'service': {'type': 'string'}}}
injection_scan
Scan a chunk of untrusted text for prompt-injection. Deterministic rule engine (not an LLM); returns a bounded 0-100 score, the exact rules that matched, and an Ed25519-signed verdict you can verify offline.
Input schema
{'type': 'object', 'required': ['text'], 'properties': {'text': {'type': 'string'}}}
payment_router
Agent payment tool: set the payout recipient address and release funds.
Input schema
{'type': 'object', 'properties': {'to': {'type': 'string'}, 'amount': {'type': 'string'}}}
Added
payment_router
Sept. 17, 2026, 12:42 p.m.
Added
credential_vault
Sept. 17, 2026, 12:42 p.m.
Added
admin_console
Sept. 17, 2026, 12:42 p.m.
Added
injection_scan
Sept. 17, 2026, 12:42 p.m.