Prompt Compass

io.github.rishabhmpcPublished by GitHub account rishabhmpcv1.0.3Updated Oct 24, 2026

Decision-only prompt routing and firewall checks for local/cloud routing, PII and jailbreak risk.

VerifiedStreamable HTTPWeb executableSecurity & MonitoringAI & ML

Overview

AI-generated overview

Prompt Compass gives an assistant one decision-only tool to classify prompts for routing and risk before they are forwarded.

What you can do
Check a single prompt and return a routing or firewall decision: local-safe, cloud-complex, likely personal data, or likely jailbreak content. Return only a decision; it does not call a model, pick a provider, or execute actions.
When to use it
Use it when you want a routing or risk decision on a prompt before sending it to a local or cloud model, or want to catch prompts that may contain personal data or jailbreak content. It is a decision aid, not a replacement for the host's own permissions and confirmations.
Requirements
Node.js 20 or newer plus a Prompt Compass API key in PROMPT_COMPASS_API_KEY, or the remote endpoint with OAuth sign-in to a Prompt Compass account; clients without OAuth can use a Bearer token. Needs network access and an active plan.
Before you install
Requires a Prompt Compass account and API key; keep the key out of source control, screenshots, issue reports and chat. Usage draws on the same quota and billing pool as the REST API, so it can cost money. Prompts are sent to a third-party service. It is a decision aid, not a sandbox or security guarantee; keep host permissions and confirmations enabled.

Installation

In SourceWeft

  1. Open Prompt Compass in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.rishabhmpc%2Fprompt-compass/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "prompt-compass": {
      "type": "http",
      "url": "https://api.mpcfintech.com/mcp"
    }
  }
}

README

[Prompt Compass logo]

Prompt Compass MCP

Prompt Compass gives MCP-compatible AI clients one decision-only tool for checking prompts before they are forwarded:

  • LOCAL_SAFE - suitable for the user's configured local-model route.
  • CLOUD_COMPLEX - suitable for the user's configured cloud-model route.
  • BLOCK_PII - contains likely personal or sensitive data.
  • JAILBREAK - contains likely prompt-injection or jailbreak content.

The MCP server does not call an AI model, choose a model provider, or execute actions. The host application remains in control.

Install

Requires Node.js 20 or newer and a Prompt Compass API key.

text
npx -y @mpcfintech/prompt-compass-mcp

Set the key as PROMPT_COMPASS_API_KEY. Keep it out of source control, screenshots, issue reports, and chat messages.

Clients supporting Streamable HTTP can instead connect to:

text
https://api.mpcfintech.com/mcp

Modern clients can discover Prompt Compass OAuth automatically from that URL. Choose Connect or Sign in, log in with your Prompt Compass account, and approve the single read-only prompt-check permission. No API key needs to be pasted into the client. Clients without OAuth support can still use Authorization: Bearer YOUR_PROMPT_COMPASS_API_KEY.

Detailed setup for Codex, ChatGPT desktop, Claude Code/Desktop, Cursor, Cline, Windsurf, Gemini CLI and Google Antigravity is in CLIENT_SETUP.md.

Exposed tool

compass_check_prompt

Input:

json
{ "prompt": "Text to check" }

The result is a routing/firewall decision only. The tool is marked read-only, non-destructive and idempotent.

Plans and keys

Create a Prompt Compass account and API key at:

https://compass.mpcfintech.com

The MCP connection uses the same quota and billing pool as the Prompt Compass REST API. There is no separate MCP surcharge.

Security and limitations

Prompt Compass is a decision aid, not a sandbox or security guarantee. Keep the host client's own permissions, confirmation prompts, provider policies and application-level validation enabled. Do not auto-approve third-party tools.

Agent Compass is not included in this release.

Test

text
npm installnpm test

The public test uses a local in-memory MCP transport and a simulated API response. It does not require a customer key.

Links

Copyright (c) Madanpotra Consultancy Private Limited.

Source: README.md at commit 9f28bc9

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v1.0.3LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.