Security Preflight

io.github.jdhart81由 GitHub 帳號 jdhart81 發布v1.3.1更新於 Nov 2, 2026

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

發布方自己的服務：Preflight

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

服務詳細資訊

識別碼: io.github.jdhart81/security-preflight
傳輸: Streamable HTTP
執行環境: Web executable
信任: Verified
發布於: Sep 16, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 jdhart81。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.jdhart81%2Fsecurity-preflight.svg)](https://sourceweft.com/mcp/io.github.jdhart81%2Fsecurity-preflight?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

遠端 MCP 服務，提供付費的靜態安全預檢、內嵌原始碼掃描與提示注入篩檢，並回傳簽章收據。

可以做什麼: 執行靜態安全預檢並取得簽章收據
掃描內嵌原始碼中的弱點指標，回傳去識別化的簽章收據
批次篩檢文字樣本中的確定性提示注入標記
讀取收據的過濾後公開檢視，並查看此代理的範圍、輸入與輸出說明
適用情境: 在採用某段程式碼或文字前，想快速、確定性地檢查其安全指標，或需要一份可稽核的檢查收據時使用。適合作為代理工作流程中的低成本預檢關卡，而非完整稽核。
執行需求: 遠端 streamable HTTP 端點，無需安裝套件。每次檢查定價 1 美元；直接使用 MCP 需要結帳呼叫方與經驗證的固定順序工作階段，另有獨立的 x402 HTTP 付款通道。未宣告環境變數或請求標頭。

安裝前請注意

每次工具呼叫花費 1 美元，反覆使用會產生費用。結果僅為啟發式指標，並非已證實的漏洞或經校準的安全機率，也不會抓取或測試任何已部署端點。公開檢視中的收據未簽章且經過過濾，需保留原始交付檔以驗證簽章。原始碼與文字樣本會傳送至第三方託管服務。

安裝

在 SourceWeft 中

開啟儀表板中的 Security Preflight，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.jdhart81%2Fsecurity-preflight/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "security-preflight": {
      "type": "http",
      "url": "https://mcp.viridis-security.com/security-preflight/mcp"
    }
  }
}

README

Viridis Agent Fleet: open-source agents for the agent economy

Deterministic, auditable MCP agents: trust and settlement rails (identity, trust, escrow, metering, arbitration, notary, surety, provenance, covenant, offsets, compute-ledger) and priced-grade services (tax credits, GHG accounting, construction takeoff, measurement, compliance). Every core is pure Python with no LLM in the serving path, and every result is content-addressed so anyone can re-verify it.

Licensed Apache-2.0. Run any agent yourself, fork it, embed it.

Run an agent locally (free, forever)

bash

pip install -r requirements-dev.txtpython3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCPpython3 run_fleet_tests.py                                 # every agent's invariant tests

pip install -r requirements-dev.txtpython3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCPpython3 run_fleet_tests.py                                 # every agent's invariant tests

Or use the hosted fleet

https://mcp.viridisconservation.com runs all agents as one managed MCP service:

	Self-hosted (this repo)	Hosted by Viridis
Agent logic & verification	✅ identical	✅ identical
Viridis-signed receipts & notary chain	–	✅
Shared trust/reputation network data	–	✅
Maintained rule packs (tax, GHG factors, regs)	snapshot	✅ kept current
Payments (x402, card), seats, SLA	–	✅

Free tier: 10 calls/day per service; the rails (identity, escrow, metering…) are free forever. Verification is always free.

For agents

Agents and LLM tools can start from llms.txt, a generated index of every agent, and AGENTS.md, the rules for using and changing the fleet.

Part of the Viridis open-source commons

Building agents for conservation or energy work? VergeCommon and EnergyAI MCP also expose MCP tools, and ViridisOS serves its decision functions to agents over MCP.

This project is one of a connected set of open tools from Viridis. Each stands on its own; together they run from field evidence to checked decisions.

Conservation commons

VergeCommon: community conservation co-ops with consent-based land mapping, field evidence and group decisions
Dendritic Forest Management (DFM): compare forest-retention options around roads and waterways, with traceable inputs and portable reports
Global Soil Intelligence Project (GSIP): contribute soil observations and explore open soil maps with explicit uncertainty

Verifiable science

Viridis Canon: machine-checked Lean 4 mathematics for ecological decisions, with a DOI for every result
ViridisOS: open reference runtime for DOI-backed decision modules and recomputable results
Viridis Research: the nightly public research record, each claim labeled by what a verifier actually checked
ProofLens: see what a Lean statement means before reading the proof

Agent tools

Viridis Agent Fleet (this repository): open-source MCP agents with deterministic, auditable cores
EnergyAI MCP: energy-planning estimates and incentive sources for AI agents

Browse every project on the Viridis profile. If this one is useful to you, a star helps other people find it.

Boundary

This repo contains agent cores, MCP adapters, tests, standards and self-host tooling. The hosted service layer (gateway, payment and settlement, seats, signing authority, operations, telemetry and customer data) is proprietary and is not in this repo. Please don't open PRs that add it.

"Viridis", "Viridis Conservation" and the Viridis marks are trademarks of Viridis LLC; see TRADEMARKS.md.

來源：README.md，提交 350712c

工具

security_preflight

Static agent manifest assessment

Run a $1 static Security Preflight and return a signed receipt. Direct MCP requires the checkout caller and verified fixed-order session. The separate x402 HTTP rail retains its existing introductory quote policy. No deployed endpoint is fetched or tested. Importing the receipt into an Agent Market profile is a separate, explicit action.

輸入參數policyagent_id必填manifest必填request_idsession_idpayment_refsample_inputssubject_profile_sha256

scan_source

Inline source indicator scan

$1 bounded inline VulnCanon source scan; indicators, not proven exploits. Direct MCP requires the checkout caller and verified fixed-order session. At most 64 KiB, 2000 lines, 4096 characters per line. No model calls, repository fetching or code execution. Returns a redacted signed receipt.

輸入參數source必填agent_id必填session_id

screen_injection

Text injection indicator screening

$1 batch of 1–20 text samples screened for deterministic injection markers. Direct MCP requires the checkout caller and verified fixed-order session. Maximum 64 KiB total. Heuristic indicators, not calibrated probabilities or a guarantee of safety. No model calls or automatic follow-on purchase.

輸入參數texts必填agent_id必填session_id