io.github.jeannicolasdavid1979Published by GitHub account jeannicolasdavid1979v0.2.2Updated Oct 25, 2026
Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.
Verdict L402's hosted MCP server (verdict.kechlab.com); no sign-in required; Streamable HTTP; 4 tools.
No AI overview yet: these facts come from the registry entry and the server itself.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.jeannicolasdavid1979%2Fverdictl402/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"verdict-l402": {
"type": "http",
"url": "https://verdict.kechlab.com/mcp"
}
}
}Prompt-injection guard
Free sample. Before your agent reads untrusted text (web page, email, document, tool output), check it for prompt injection, data exfiltration requests, secrets and toxic content. Returns allow, review or block with scores and reasons. Use it on text you did not write. Do not use it to judge an action: use verdict_firewall.
textrequiredShell command gate
Free sample. Before a coding agent runs a shell command, ask whether to allow, review or block it: root deletion, download and run, privilege escalation, secret exfiltration. Pass the human intent when you know it. Not a sandbox: it reads the command, it does not run it.
intentcommandrequiredMCP tool vetting
Free sample. Before installing an MCP server, skill or tool: is its description poisoned (hidden orders to the agent, excessive permissions, look-alike names)? Returns allow, review or block with reasons.
namerequiredtoolsdescriptionrequiredpermissionsAction firewall
Free sample. Before an agent acts on untrusted content (pay, send, delete, click, reply), give the human goal, the content it read and the action it proposes. Returns allow, review or block: it catches actions that follow orders hidden in the content.
goalrequiredactionrequiredcontentrequired75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
Declare a license in the repository or the registry entry.