Tripwire Guard — evidence-first injection scanner MCP Server

by kubaopoczka Your server? Claim it

local only

Tripwire Guard — evidence-first injection scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 75 installs a week from npm. Last commit 13 Aug 2026.

Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.

Installs per day peak 326 · avg 11

a month agotoday

Installs / week

npm · tripwire-guard

Stars

0 open issues

13 Aug 2026

Last commit

0 releases in 90 days

MIT

License

JavaScript

Nothing serious here today

Today is the operative word: we check Tripwire Guard — evidence-first injection scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add tripwire-guard -- npx -y tripwire-guard

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "tripwire-guard": {
      "args": [
        "-y",
        "tripwire-guard"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.tripwire-guard]
command = "npx"
args = ["-y", "tripwire-guard"]

.cursor/mcp.json

{
  "mcpServers": {
    "tripwire-guard": {
      "args": [
        "-y",
        "tripwire-guard"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "tripwire-guard": {
      "args": [
        "-y",
        "tripwire-guard"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Tripwire Guard — evidence-first injection scanner

same job, measured the same way

DealWatch

by xiaojiou176-open

Local-first grocery price intelligence with a read-only MCP server.

37 installs/wk local only

ToolTrust Scanner

by agentsafe-ai

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.

123 installs/wk local only

Ownly

by liuh886

Local-first Ownly evidence and repeatable Planner visits with preview-before-commit writes.

600 installs/wk local only

DevTime

by shakargy

Local-first, read-only MCP server for evidence-backed repository memory.

201 installs/wk local only

Site Rep MCP

by nish3451

Read-only Site Rep handoff: agent brief, pending work, first-customer receipt with payment evidence.

answering

Pylos MCP

by adamvass

Read-focused, prompt-injection-hardened email MCP server for any IMAP provider

71 installs/wk local only

Navigator

by mentu

Read-only repo navigation and progressive disclosure; BM25 locator with registered evidence.

107 installs/wk local only

Caelune

by ellismorrow

Read-only local-first MCP server for private Markdown, PDF, and Tika-backed search on Windows.

local only

Tripwire Guard — evidence-first injection scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Tripwire Guard — evidence-first injection scanner?

Tripwire Guard — evidence-first injection scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package tripwire-guard was installed 75 times last week.

How do I connect Tripwire Guard — evidence-first injection scanner?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls tripwire-guard straight from npm; nothing to host, nothing to sign up for.

How many people use Tripwire Guard — evidence-first injection scanner?

The npm package tripwire-guard was installed 75 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Tripwire Guard — evidence-first injection scanner open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.