mcpbeat Sign in

SafePrompt MCP Server

by safeprompt Your server? Claim it
answering

SafePrompt is answering right now. Last checked 14 min ago. 254 installs a week from npm. It exposes 2 tools. Last commit 29 Oct 2026.

Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.

Installs per day peak 189 · avg 10 · +2017% w/w
a month agotoday
Uptime history 4 days of history
4 days agonow
100.0%
Uptime 24h
91 of 91 checks
2
Tools
read from the server
131 ms
Response time
average over 24h
254
Installs / week
npm and PyPI

What the code does

We read the source, 3 d ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] src/verdict.ts:1
этот файл ставится пользователю, но в репозитории его нет

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

run in your terminal
claude mcp add mcp --transport http https://mcp.safeprompt.dev/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.safeprompt.dev/mcp
~/.codex/config.toml
[mcp_servers.mcp]
url = "https://mcp.safeprompt.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.safeprompt.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://mcp.safeprompt.dev/mcp"
    }
  }
}

Available tools 2

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

validate
validate_prompt
Check a single piece of untrusted text (a user message, a retrieved RAG document, tool output, etc.) for prompt injection, jailbreaks, instruction-override, data-exfiltration, and code injection BEFORE passing it to an LLM. Returns a safe/unsafe verdict with confidence, threat category, and reasoning.
validate_prompts
Validate many pieces of untrusted text in one call (processed in parallel server-side). Use for bulk pre-screening, indexing pipelines, or checking a batch of retrieved documents. Returns one verdict per input, in order.

Endpoints

URLTransportStateLatencyChecked
https://mcp.safeprompt.dev/mcp streamable-http answering 91 ms 14 min ago

Alternatives to SafePrompt

same job, measured the same way
AI Code Scanner
by guardbee

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

298 installs/wk local only
AI Code Scanner
by 4hmetuyar

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

local only
GuardianShield
by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

84 installs/wk local only
Phi Guard MCP
by abidit

Local-first PHI detection for source code, LLM prompts, logs, and analytics

69 installs/wk local only
L
LLM Red-Team Scanner
by workers-manhliemcn4euwlu-llmrt-companion

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

5 tools answering
Pituitary
by dusk-network

Catch spec drift before it catches you. Detect overlap, stale docs, and code drift.

local only
Safe Fix MCP
by pamela-0

Finds real dead code and proposes a safe, test-gated branch+PR to remove it.

73 installs/wk local only
Dora Register Lint
by jmshinhwa

24 checks on the register CSV before it reaches the supervisor — LEI check digits, ISO dates and cod

48 installs/wk local only

SafePrompt — questions

Answers built from our own checks of this server.

What can SafePrompt do?
It exposes 2 tools, read directly from the server on our last check. Among them: validate_prompt, validate_prompts. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is SafePrompt working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 131 ms. The bar chart above shows every period we have measured.
How do I connect SafePrompt?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does SafePrompt need an API key?
No. SafePrompt completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 2 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is SafePrompt?
It answers our handshake in 131 ms on average, which is faster than 86% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.
How many people use SafePrompt?
The npm package @safeprompt.dev/mcp was installed 254 times in the last week. Week over week that is +2017%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is SafePrompt open source?
The code is open source: it is published under the MIT licence, written in Python and 2 stars on GitHub. The licence covers the code in the repository, not the hosted service at mcp.safeprompt.dev, which runs on its operator's own terms.