GrindFree Agent Security runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 9 Nov 2026.
Pay-per-call agent security: prompt injection, URLs, tools, shell/SQL, memory, leaks, docs (x402)
Nothing serious here today
Today is the operative word: we check GrindFree Agent Security every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add grindfree-agent-security -e 'X402_PRIVATE_KEY=<X402_PRIVATE_KEY>' -- npx -y @grindfree/agent-security-mcp{
"mcpServers": {
"grindfree-agent-security": {
"command": "npx",
"args": [
"-y",
"@grindfree/agent-security-mcp"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}[mcp_servers.grindfree-agent-security]
command = "npx"
args = ["-y", "@grindfree/agent-security-mcp"]
env = { X402_PRIVATE_KEY = "<X402_PRIVATE_KEY>" }{
"mcpServers": {
"grindfree-agent-security": {
"command": "npx",
"args": [
"-y",
"@grindfree/agent-security-mcp"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}{
"servers": {
"grindfree-agent-security": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@grindfree/agent-security-mcp"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}Put your own value in place of
<X402_PRIVATE_KEY> (Caller's own Base USDC EVM private key (0x…). Used only by the local MCP host to settle x402 payments. Never a GrindFree key; never commit this value).
The author’s registry entry marks it as required.
Alternatives to GrindFree Agent Security
same job, measured the same wayLineage-gated agent memory tools on Postgres + pgvector, enforced by row-level security.
Persistent, verified, cross-session memory for AI agents. 26 tools. SQLite + sync.
Persistent, verified, cross-session memory for AI agents. 26 tools. SQLite + sync.
x402 pay-per-call infra for agents: $0.03 image generation, Postgres, auth, storage, functions.
Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.
Persistent, structured project memory for AI coding agents, stored locally in SQLite.
Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.
Persistent memory for AI coding agents. Local-first SQLite + vector search. 17 MCP tools.
GrindFree Agent Security — questions
Answers built from our own checks of this server.