Diogenes Agent Guardrails & Sandbox MCP

Name: Diogenes Agent Guardrails & Sandbox MCP
Author: stand-out-of-my-sun

MCP serverMCP

Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls.

by stand-out-of-my-sunrepository ↗homepage ↗v1.0.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"diogenes-agent-guardrails-sandbox-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability3/3 checks ok

30 days agotoday

Tools observed via MCP handshake

verify_agent_command_safety — Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use wh
validate_sql_query_ast — Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses
execute_python_sandbox — Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access.
audit_mcp_server_manifest — Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in description
detect_mcp_schema_rugpull — Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use
validate_mcp_sampling_request — Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota
sanitize_tool_output_stream — Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, a
redact_sensitive_pii — Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping perso
detect_agent_action_loop — Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring multi-step agent
verify_a2a_agent_card — Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. U
audit_outbound_egress_url — Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-st
audit_response_factuality — Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before de

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

repoUrl Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.stand-out-of-my-sun/diogenes-agent-guardrails-mcp

first seen 18 h ago · fetched 18 h agoopen ↗

Field history (7 recent events)

18 h ago · declared · summary → "Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls."
18 h ago · declared · description → "Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls."
18 h ago · declared · publisherName → "stand-out-of-my-sun"
18 h ago · declared · homepageUrl → "https://diogenes-micro-gateway.corinth.workers.dev"
18 h ago · declared · repoUrl → "https://github.com/stand-out-of-my-sun/diogenes-agent-guardrails-mcp"
18 h ago · declared · version → "1.0.0"
18 h ago · declared · protocols → ["mcp"]

when	check	result	http	latency	detail
3 h ago	mcp initialize	ok	200	83 ms	server diogenes-edge-gateway 2.5.0 · protocol 2024-11-05 · 12 tools
10 h ago	mcp initialize	ok	200	35 ms	server diogenes-edge-gateway 2.5.0 · protocol 2024-11-05 · 12 tools
17 h ago	mcp initialize	ok	200	36 ms	server diogenes-edge-gateway 2.5.0 · protocol 2024-11-05 · 12 tools

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from