com.scriptmasterlabsPublished by scriptmasterlabs.comv1.1.0Updated Nov 4, 2026
Three fast safety checks for agents, each with a signed hash-chained receipt: (1) prompt-injection c
The publisher's own server: SCRIPTMASTERLABS — B20 Truth
SCRIPTMASTERLABS — SML agent-safety's hosted MCP server (sml-agent-products.onrender.com), published by scriptmasterlabs.com; no sign-in required; Streamable HTTP; 4 tools.
No AI overview yet: these facts come from the registry entry and the server itself.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.scriptmasterlabs%2Fagent-safety/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"scriptmasterlabs-sml-agent-safety": {
"type": "http",
"url": "https://sml-agent-products.onrender.com/agent-safety/mcp"
}
}
}Prompt-injection check ($0.004 via x402 at POST https://sml-agent-products.onrender.com/agent-safety/v1/prompt-injection). POST {text}. Verdict safe/suspicious/malicious + score + categories + matched spans + obfuscation tricks found + recommendation.
textrequiredURL safety check ($0.004 via x402 at GET https://sml-agent-products.onrender.com/agent-safety/v1/url-safety). GET ?url=. Verdict safe/suspicious/dangerous + score + reasons (lookalike, brand impersonation, domain age, redirects, seed-phrase/drainer content, agent-targeted injection).
urlrequiredx402 endpoint health / pay-readiness ($0.002 via x402 at GET https://sml-agent-products.onrender.com/agent-safety/v1/x402-health). GET ?url=&method=GET|POST&maxUsd=. Live probe (never pays): go/caution/no_go, recommended payment option, every accepts problem, discovery + bazaar metadata, latency.
urlrequiredmaxUsdmethodMachine-readable catalog with prices and 402 terms
Takes no parameters.
83% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.
com.scriptmasterlabsOfficial publisher
SCRIPTMASTERLABS — B20 Truth's hosted MCP server, published by scriptmasterlabs.com; no sign-in required; Streamable HTTP; 1 tool.
com.scriptmasterlabsOfficial publisher
Remote MCP server that runs pre-trade risk checks on proposed orders against your policy and returns PASS, REJECT or INSUFFICIENT_DATA with signed receipts.
com.scriptmasterlabsOfficial publisher
Remote MCP server exposing verified track records for AI agents: free read-only proof records, ledger and job board lookups, plus a paid signed Proof Check.
com.scriptmasterlabsOfficial publisher
Remote MCP endpoint for Verdict Protocol: inspect service status, freeze research capsules, verify hashes, aggregate jury votes, and call a paid five-juror…
com.scriptmasterlabs
A local stdio MCP server described as an agent payer wallet, offering trust pre-flight checks, a spend leash, Verdict step-up and an evidence log.