mcpbeat Sign in

Security Preflight MCP Server

answering

Security Preflight is answering right now. Last checked 10 min ago. It exposes 5 tools. Last commit 18 Sep 2026.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

Uptime history 47 days of history · worst day 99%
47 days agonow
99.5%
Uptime 24h
181 of 182 checks
5
Tools
read from the server
430 ms
Response time
average over 24h
0
Stars
last commit 18 Sep 2026

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 September 2026. No other catalogue keeps this.

9 Sep 2 tools appeared scan_source, screen_injection

What the code does

We read the source, 19 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Unsafe deserialization gateway/state_store.py:356
                state = pickle.loads(row[0])
Runs an external command mcp-publish/smoke_all.py:176
    r = subprocess.run([sys.executable, "-c", code], capture_output=True, text=True)
Page executes code built at runtime gateway/stats.html:191
  $("kpis").innerHTML = cells.map(([l,v,d]) =>
Dumps the whole environment growth-agent/growth_agent.py:512
        self.environ = dict(os.environ if environ is None else environ)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add security-preflight --transport http https://mcp.viridisconservation.com/security-preflight/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "security-preflight": {
      "url": "https://mcp.viridisconservation.com/security-preflight/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.security-preflight]
url = "https://mcp.viridisconservation.com/security-preflight/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "security-preflight": {
      "url": "https://mcp.viridisconservation.com/security-preflight/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "security-preflight": {
      "url": "https://mcp.viridisconservation.com/security-preflight/mcp"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

security
get_security_receipt
Read a previously issued public, input-redacted receipt.
security_preflight
Run a $1 static Security Preflight and return a signed receipt. New x402 payer wallets may receive the fleet-wide $0.01 introductory call. No deployed endpoint is fetched or tested. Importing the receipt into an Agent Market profile is a separate, explicit action.
describe
describe_agent
Describe scope, evidence boundary, inputs, and outputs.
scan
scan_source
$1 bounded inline VulnCanon source scan; indicators, not proven exploits. At most 64 KiB, 2000 lines, 4096 characters per line. No model calls, repository fetching or code execution. Returns a redacted signed receipt.
screen
screen_injection
$1 batch of 1–20 text samples screened for deterministic injection markers. Maximum 64 KiB total. Heuristic indicators, not calibrated probabilities or a guarantee of safety. No model calls or automatic follow-on purchase.

Endpoints

URLTransportStateLatencyChecked
https://mcp.viridisconservation.com/security-preflight/mcp streamable-http answering 326 ms 10 min ago
https://mcp.viridis-security.com/security-preflight/mcp streamable-http answering 443 ms 10 min ago

Alternatives to Security Preflight

same job, measured the same way
koment
by koment-dev

Read and write checked code rationale stored outside source comments.

local only
koment
by janpuc

Read and write checked code rationale stored outside source comments.

local only
Soma
by medianemi-beep

Execution-verified code generation and verification with signed, offline-checkable certificates.

29 installs/wk local only
Protect MCP
by tomjwxf

Signed receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway.

2 489 installs/wk local only
Unswell
by stokaro

Offline self-checking to reduce AI-style wording in source code and documentation.

local only
Code Relay
by zarcherlot

Branch-scoped runbooks, remote checkpoints, and auditable verification receipts.

51 installs/wk local only
Signalpipe
by abyousef739

Agentic Reddit/HN buying-signal detection for Claude Code, Cursor, and Windsurf via MCP.

answering
Readyorai
by tedoneobichajavascript

Zero-cost MCP server for local code inspection and best-practice recommendations

32 installs/wk local only

Security Preflight — questions

Answers built from our own checks of this server.

What can Security Preflight do?
It exposes 5 tools, read directly from the server on our last check. Among them: describe_agent, get_security_receipt, scan_source, screen_injection, security_preflight. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Security Preflight working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 181 of 182 checks got a reply (99.5%), average response time 430 ms. The bar chart above shows every period we have measured.
How do I connect Security Preflight?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Security Preflight need an API key?
No. Security Preflight completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Security Preflight?
It answers our handshake in 430 ms on average, which is faster than 35% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Security Preflight open source?
We cannot say either way: written in Python, 0 stars on GitHub and 1 open issue, but we could not determine the licence, and without one the code is not open source by default.