Security Preflight is answering right now. Last checked moments ago. It exposes 5 tools. Last commit 1 Nov 2026.
Static MCP, source-code and injection-indicator checks with redacted signed receipts.
What changed 9
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 September 2026. No other catalogue keeps this.
What the code does
We read the source, 21 h ago · tools taken from the live server · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
r = subprocess.run([sys.executable, "-m", "pytest", "tests", "-q", "--no-header", "--tb=line",
$("cta").innerHTML = renderCta(PAYMENT_LINK_URL);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 0 min ago.
claude mcp add security-preflight --transport http https://mcp.viridisconservation.com/security-preflight/mcphttps://mcp.viridisconservation.com/security-preflight/mcp[mcp_servers.security-preflight]
url = "https://mcp.viridisconservation.com/security-preflight/mcp"{
"mcpServers": {
"security-preflight": {
"url": "https://mcp.viridisconservation.com/security-preflight/mcp"
}
}
}{
"servers": {
"security-preflight": {
"type": "http",
"url": "https://mcp.viridisconservation.com/security-preflight/mcp"
}
}
}This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.
Available tools 5
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
get_security_receipt
security_preflight
describe_agent
scan_source
screen_injection
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.viridisconservation.com/security-preflight/mcp | streamable-http | answering | 325 ms | 0 min ago |
| https://mcp.viridis-security.com/security-preflight/mcp | streamable-http | answering | 419 ms | 16 min ago |
Alternatives to Security Preflight
same job, measured the same wayMedicare DME coverage by HCPCS code and date of service, with CMS citations and signed receipts.
Read and write checked code rationale stored outside source comments.
Read and write checked code rationale stored outside source comments.
Execution-verified code generation and verification with signed, offline-checkable certificates.
Local, token-budgeted code context with file:line provenance and selection receipts.
Offline self-checking to reduce AI-style wording in source code and documentation.
Deterministic MCP for statistical classifications and survey codelists with provenance.
Check the bank behind an IBAN before you pay: bank-code check, BIC with source, bank-level sanctions
Security Preflight — questions
Answers built from our own checks of this server.