Tripwire Guard — evidence-first injection scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 33 installs a week from npm. Last commit 13 Aug 2026.
Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
Today is the operative word: we check Tripwire Guard — evidence-first injection scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add tripwire-guard -- npx -y tripwire-guard
{
"mcpServers": {
"tripwire-guard": {
"args": [
"-y",
"tripwire-guard"
],
"command": "npx"
}
}
}
[mcp_servers.tripwire-guard]
command = "npx"
args = ["-y", "tripwire-guard"]
{
"mcpServers": {
"tripwire-guard": {
"args": [
"-y",
"tripwire-guard"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"tripwire-guard": {
"args": [
"-y",
"tripwire-guard"
],
"command": "npx"
}
}
}
Local prompt regression tracker with six fictional cases and evidence for human review.
Local-first MCP for supported Adobe Premiere Pro workflows; start with a read-only connection check.
Local-first grocery price intelligence with a read-only MCP server.
PIL: local-first knowledge base for your Instagram saved posts, with a read-only MCP server.
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
Local-first Ownly evidence and repeatable Planner visits with preview-before-commit writes.
Local-first, read-only MCP server for evidence-backed repository memory.
Read-only Site Rep handoff: agent brief, pending work, first-customer receipt with payment evidence.
Answers built from our own checks of this server.