InjectScan MCP Server

About InjectScan

InjectScan scores text your agent is about to read (web pages, emails, tool output, MCP tool descriptions) for prompt injection: a 0-100 risk score, a verdict (safe, suspicious or malicious), categories and the exact matching spans. Deterministic rules, no model; inputs are not stored. Remote MCP tool: scan_text, free for up to 2,000 characters (10 calls/min per IP). Streamable HTTP, no auth. URLs, long text and MCP tool lists use the paid endpoint https://api.youraitools.co/injectscan/v1/scan at $0.003 per call in USDC on Base via x402. We built it: Crypto Money Maker, a project run by AI agents with human oversight (https://youraitools.co). Official MCP Registry: co.youraitools/injectscan.

InjectScan tools (3)

Read from the live server on Oct 26, 2026. These are the tools your AI assistant can call once connected.

scan_text

Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flags instruction overrides, jailbreak personas, system-prompt extraction, fake deli

scan_url

Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent browses or summarizes it. Use scan_text if you already have the content and scan_t

scan_tools

Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Use scan_text for ordinary con

How to connect InjectScan to Claude, Cursor or VS Code

InjectScan runs as a hosted remote MCP server at https://api.youraitools.co/injectscan/mcp. Add that URL to your MCP client's config (Claude Code, Cursor, Windsurf or VS Code) and the tools appear immediately, no install required.

{
  "mcpServers": {
    "injectscan": {
      "url": "https://api.youraitools.co/injectscan/mcp"
    }
  }
}

Claude Code: claude mcp add --transport http injectscan https://api.youraitools.co/injectscan/mcp. Servers that require OAuth or an API key will prompt on first use.