Security Preflight

io.github.jdhart81Published by GitHub account jdhart81v1.3.1Updated Nov 2, 2026

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

The publisher's own server: Preflight

VerifiedStreamable HTTPWeb executableDeveloper Tools Security & Monitoring

Server details

Identifier: io.github.jdhart81/security-preflight
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account jdhart81 for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.jdhart81%2Fsecurity-preflight.svg)](https://sourceweft.com/mcp/io.github.jdhart81%2Fsecurity-preflight?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP service that runs paid static security preflight checks, inline source scans and prompt-injection screening, returning signed receipts.

What you can do: Run a static security preflight and get a signed receipt
Scan inline source code (bounded size) for vulnerability indicators and receive a redacted signed receipt
Screen a batch of text samples for deterministic prompt-injection markers
Read a filtered public view of a receipt and describe the agent's scope, inputs and outputs
When to use it: When you want a quick, deterministic check of a code snippet or text for security indicators before using it, or need an auditable receipt of that check. Useful for agent workflows that want a cheap preflight gate rather than a full audit.
Requirements: Remote streamable HTTP endpoint; no package install. Each check is priced at $1, and direct MCP use requires a checkout caller and a verified fixed-order session; a separate x402 HTTP payment rail exists. No environment variables or headers are declared.

Before you install

Each tool call costs $1, so repeated use spends money. Results are heuristic indicators, not proven exploits or calibrated safety probabilities, and no deployed endpoint is fetched or tested. Receipts from the public view are unsigned and filtered, so keep the original delivery for signature verification. Source and text samples are sent to a third-party hosted service.

Installation

In SourceWeft

Open Security Preflight in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.jdhart81%2Fsecurity-preflight/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "security-preflight": {
      "type": "http",
      "url": "https://mcp.viridis-security.com/security-preflight/mcp"
    }
  }
}

README

Viridis Agent Fleet: open-source agents for the agent economy

Deterministic, auditable MCP agents: trust and settlement rails (identity, trust, escrow, metering, arbitration, notary, surety, provenance, covenant, offsets, compute-ledger) and priced-grade services (tax credits, GHG accounting, construction takeoff, measurement, compliance). Every core is pure Python with no LLM in the serving path, and every result is content-addressed so anyone can re-verify it.

Licensed Apache-2.0. Run any agent yourself, fork it, embed it.

Run an agent locally (free, forever)

bash

pip install -r requirements-dev.txtpython3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCPpython3 run_fleet_tests.py                                 # every agent's invariant tests

pip install -r requirements-dev.txtpython3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCPpython3 run_fleet_tests.py                                 # every agent's invariant tests

Or use the hosted fleet

https://mcp.viridisconservation.com runs all agents as one managed MCP service:

	Self-hosted (this repo)	Hosted by Viridis
Agent logic & verification	✅ identical	✅ identical
Viridis-signed receipts & notary chain	–	✅
Shared trust/reputation network data	–	✅
Maintained rule packs (tax, GHG factors, regs)	snapshot	✅ kept current
Payments (x402, card), seats, SLA	–	✅

Free tier: 10 calls/day per service; the rails (identity, escrow, metering…) are free forever. Verification is always free.

For agents

Agents and LLM tools can start from llms.txt, a generated index of every agent, and AGENTS.md, the rules for using and changing the fleet.

Part of the Viridis open-source commons

Building agents for conservation or energy work? VergeCommon and EnergyAI MCP also expose MCP tools, and ViridisOS serves its decision functions to agents over MCP.

This project is one of a connected set of open tools from Viridis. Each stands on its own; together they run from field evidence to checked decisions.

Conservation commons

VergeCommon: community conservation co-ops with consent-based land mapping, field evidence and group decisions
Dendritic Forest Management (DFM): compare forest-retention options around roads and waterways, with traceable inputs and portable reports
Global Soil Intelligence Project (GSIP): contribute soil observations and explore open soil maps with explicit uncertainty

Verifiable science

Viridis Canon: machine-checked Lean 4 mathematics for ecological decisions, with a DOI for every result
ViridisOS: open reference runtime for DOI-backed decision modules and recomputable results
Viridis Research: the nightly public research record, each claim labeled by what a verifier actually checked
ProofLens: see what a Lean statement means before reading the proof

Agent tools

Viridis Agent Fleet (this repository): open-source MCP agents with deterministic, auditable cores
EnergyAI MCP: energy-planning estimates and incentive sources for AI agents

Browse every project on the Viridis profile. If this one is useful to you, a star helps other people find it.

Boundary

This repo contains agent cores, MCP adapters, tests, standards and self-host tooling. The hosted service layer (gateway, payment and settlement, seats, signing authority, operations, telemetry and customer data) is proprietary and is not in this repo. Please don't open PRs that add it.

"Viridis", "Viridis Conservation" and the Viridis marks are trademarks of Viridis LLC; see TRADEMARKS.md.

Source: README.md at commit 350712c

Tools

security_preflight

Static agent manifest assessment

Run a $1 static Security Preflight and return a signed receipt. Direct MCP requires the checkout caller and verified fixed-order session. The separate x402 HTTP rail retains its existing introductory quote policy. No deployed endpoint is fetched or tested. Importing the receipt into an Agent Market profile is a separate, explicit action.

Parameterspolicyagent_idrequiredmanifestrequiredrequest_idsession_idpayment_refsample_inputssubject_profile_sha256

scan_source

Inline source indicator scan

$1 bounded inline VulnCanon source scan; indicators, not proven exploits. Direct MCP requires the checkout caller and verified fixed-order session. At most 64 KiB, 2000 lines, 4096 characters per line. No model calls, repository fetching or code execution. Returns a redacted signed receipt.

Parameterssourcerequiredagent_idrequiredsession_id

screen_injection

Text injection indicator screening

$1 batch of 1–20 text samples screened for deterministic injection markers. Direct MCP requires the checkout caller and verified fixed-order session. Maximum 64 KiB total. Heuristic indicators, not calibrated probabilities or a guarantee of safety. No model calls or automatic follow-on purchase.

Parameterstextsrequiredagent_idrequiredsession_id

get_security_receipt

Filtered public security receipt

Read an unsigned, filtered public view; retain original delivery for signature verification.

Parametersreceipt_idrequired

describe_agent

Security assessment scope and evidence

Describe scope, evidence boundary, inputs, and outputs.

Takes no parameters.

Version history

v1.3.1LatestSep 18, 2026
v1.3.0Sep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.