Power Strip Security

io.github.AlbertBalestriniPublished by GitHub account AlbertBalestriniv0.2.0Updated Oct 31, 2026

Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingFinanceSecurity & Monitoring

Overview

Power Strip Security's hosted MCP server (api.powerstripsecurity.workers.dev); no sign-in required; Streamable HTTP; 4 tools.

No AI overview yet: these facts come from the registry entry and the server itself.

Endpoint
api.powerstripsecurity.workers.dev
Last checked

Installation

In SourceWeft

  1. Open Power Strip Security in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.AlbertBalestrini%2Fpower-strip-security/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "power-strip-security": {
      "type": "http",
      "url": "https://api.powerstripsecurity.workers.dev/mcp"
    }
  }
}

Tools

4

read_url

Read a web page or PDF safely

Fetch a public web page or PDF and return it as clean markdown with hidden text, invisible characters and data-exfiltration links removed, plus a prompt-injection risk report. Costs US$0.005 in USDC on Base (x402); pages that cannot be read are not charged. Respects robots.txt.

Parametersurlrequiredformat

check_prompt_injection

Scan content for prompt injection

Scan HTML or text you already have (an email, a document, a tool result) for prompt injection. Returns the risk report and the cleaned text wrapped as untrusted data. Costs US$0.002 in USDC on Base (x402). Max 256 KB.

Parametersurlformatcontentrequiredreturn_text

audit_mcp_server

Audit an MCP server for tool poisoning

Check an MCP server for tool poisoning before you connect: hidden instructions, secrecy, sensitive-file access, cross-tool shadowing and rug pulls. Pass its URL (we list its tools read-only) or paste its tools. Optional pinned fingerprints detect changed tools. Costs US$0.01 in USDC on Base (x402); servers that cannot be listed are not charged.

Parametersurltoolspinnedinstructions

audit_agent_skill

Audit an agent skill or AGENTS.md

Check an agent skill (SKILL.md with its scripts and references) or AGENTS.md, CLAUDE.md, .cursorrules before loading it: prompt injection, curl | bash, encoded commands, credential theft, exfiltration, hardcoded keys, persistence. Paste the files or give one URL. Costs US$0.005 in USDC on Base (x402); nothing is executed.

Parametersurlfilespinned

Version history

2
  1. v0.2.0LatestOct 31, 2026
  2. v0.1.0Oct 29, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.