{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_wuysmxud2s3h","handle":"diogenes-agent-guardrails-sandbox-mcp","url":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp","links":{"self":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp/record.json","html":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp","markdown":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp/record.md","api":"https://wellknown.network/api/v1/agents/diogenes-agent-guardrails-sandbox-mcp","status":"https://wellknown.network/api/v1/agents/diogenes-agent-guardrails-sandbox-mcp/status","claim":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp/claim.json","badge":"https://wellknown.network/agents/diogenes-agent-guardrails-sandbox-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/diogenes-agent-guardrails-sandbox-mcp/history","tools":"https://wellknown.network/api/v1/agents/diogenes-agent-guardrails-sandbox-mcp/tools"},"ard":{"identifier":"urn:air:diogenes-micro-gateway.corinth.workers.dev:server:diogenes-agent-guardrails-sandbox-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"Diogenes Agent Guardrails & Sandbox MCP","summary":"Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls.","description":"Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls.","publisher":{"name":"stand-out-of-my-sun","url":null},"homepage":"https://diogenes-micro-gateway.corinth.workers.dev","repository":"https://github.com/stand-out-of-my-sun/diogenes-agent-guardrails-mcp","version":"1.0.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://diogenes-micro-gateway.corinth.workers.dev/mcp/agent-guardrails","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-20T14:40:42.826886Z","publishedAt":"2026-10-20T14:40:42.826886Z","registryName":"io.github.stand-out-of-my-sun/diogenes-agent-guardrails-mcp"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","repoUrl":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.execution","name":"Code Execution","confidence":1,"provenance":"derived"},{"slug":"dev.filesystem","name":"Filesystem","confidence":1,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":1,"provenance":"derived"},{"slug":"data.database","name":"Databases","confidence":0.933,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":0.583,"provenance":"derived"},{"slug":"dev.monitoring","name":"Monitoring & Observability","confidence":0.554,"provenance":"derived"},{"slug":"dev.docs-lookup","name":"Documentation Lookup","confidence":0.54,"provenance":"derived"},{"slug":"research.academic","name":"Academic Research","confidence":0.54,"provenance":"derived"}],"categories":["code","data","dev","research","security"],"language":"fr"},"observed":{"status":"live","statusReason":"Responded 4h ago.","lastOkAt":"2026-10-24T20:25:22.386Z","lastProbedAt":"2026-10-24T20:25:22.386Z","statusComputedAt":"2026-10-24T20:28:24.646Z","reliability30d":{"probes":3,"successRate":1,"p50Ms":36,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":3,"ok":3,"authBoundaryOk":0,"serviceOk":3,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-24T20:25:22.386Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":83,"error":null,"detail":{"tools":[{"name":"verify_agent_command_safety","description":"Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use wh"},{"name":"validate_sql_query_ast","description":"Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses"},{"name":"execute_python_sandbox","description":"Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access."},{"name":"audit_mcp_server_manifest","description":"Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in description"},{"name":"detect_mcp_schema_rugpull","description":"Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use"},{"name":"validate_mcp_sampling_request","description":"Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota "},{"name":"sanitize_tool_output_stream","description":"Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, a"},{"name":"redact_sensitive_pii","description":"Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping perso"},{"name":"detect_agent_action_loop","description":"Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring multi-step agent "},{"name":"verify_a2a_agent_card","description":"Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. U"},{"name":"audit_outbound_egress_url","description":"Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-st"},{"name":"audit_response_factuality","description":"Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before de"}],"toolCount":12,"toolsHash":"b1579892f6d024dac3b44c7ed571545ef5fb037ef58212e8d95e767774c04b6b","serverName":"diogenes-edge-gateway","capabilities":["tools"],"serverVersion":"2.5.0","protocolVersion":"2024-11-05"}},{"at":"2026-10-24T13:28:45.697Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":35,"error":null,"detail":{"tools":[{"name":"verify_agent_command_safety","description":"Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use wh"},{"name":"validate_sql_query_ast","description":"Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses"},{"name":"execute_python_sandbox","description":"Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access."},{"name":"audit_mcp_server_manifest","description":"Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in description"},{"name":"detect_mcp_schema_rugpull","description":"Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use"},{"name":"validate_mcp_sampling_request","description":"Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota "},{"name":"sanitize_tool_output_stream","description":"Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, a"},{"name":"redact_sensitive_pii","description":"Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping perso"},{"name":"detect_agent_action_loop","description":"Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring multi-step agent "},{"name":"verify_a2a_agent_card","description":"Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. U"},{"name":"audit_outbound_egress_url","description":"Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-st"},{"name":"audit_response_factuality","description":"Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before de"}],"toolCount":12,"toolsHash":"b1579892f6d024dac3b44c7ed571545ef5fb037ef58212e8d95e767774c04b6b","serverName":"diogenes-edge-gateway","capabilities":["tools"],"serverVersion":"2.5.0","protocolVersion":"2024-11-05"}},{"at":"2026-10-24T06:26:53.389Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":36,"error":null,"detail":{"tools":[{"name":"verify_agent_command_safety","description":"Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use wh"},{"name":"validate_sql_query_ast","description":"Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses"},{"name":"execute_python_sandbox","description":"Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access."},{"name":"audit_mcp_server_manifest","description":"Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in description"},{"name":"detect_mcp_schema_rugpull","description":"Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use"},{"name":"validate_mcp_sampling_request","description":"Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota "},{"name":"sanitize_tool_output_stream","description":"Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, a"},{"name":"redact_sensitive_pii","description":"Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping perso"},{"name":"detect_agent_action_loop","description":"Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring multi-step agent "},{"name":"verify_a2a_agent_card","description":"Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. U"},{"name":"audit_outbound_egress_url","description":"Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-st"},{"name":"audit_response_factuality","description":"Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before de"}],"toolCount":12,"toolsHash":"b1579892f6d024dac3b44c7ed571545ef5fb037ef58212e8d95e767774c04b6b","serverName":"diogenes-edge-gateway","capabilities":["tools"],"serverVersion":"2.5.0","protocolVersion":"2024-11-05"}}],"tools":[{"name":"verify_agent_command_safety","description":"Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use wh"},{"name":"validate_sql_query_ast","description":"Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses"},{"name":"execute_python_sandbox","description":"Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access."},{"name":"audit_mcp_server_manifest","description":"Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in description"},{"name":"detect_mcp_schema_rugpull","description":"Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use"},{"name":"validate_mcp_sampling_request","description":"Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota "},{"name":"sanitize_tool_output_stream","description":"Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, a"},{"name":"redact_sensitive_pii","description":"Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping perso"},{"name":"detect_agent_action_loop","description":"Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring multi-step agent "},{"name":"verify_a2a_agent_card","description":"Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. U"},{"name":"audit_outbound_egress_url","description":"Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-st"},{"name":"audit_response_factuality","description":"Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before de"}],"package":null,"toolSurface":{"id":"ts_ah89rd9hr2g7","endpointId":"ep_9jest2dv4f22","hash":"b1579892f6d024dac3b44c7ed571545ef5fb037ef58212e8d95e767774c04b6b","toolCount":12,"serverName":"diogenes-edge-gateway","serverVersion":"2.5.0","protocolVersion":"2024-11-05","firstSeenAt":"2026-10-24T06:26:53.397Z","lastSeenAt":"2026-10-24T20:25:22.388Z","observations":3,"toolNames":["verify_agent_command_safety","validate_sql_query_ast","execute_python_sandbox","audit_mcp_server_manifest","detect_mcp_schema_rugpull","validate_mcp_sampling_request","sanitize_tool_output_stream","redact_sensitive_pii","detect_agent_action_loop","verify_a2a_agent_card","audit_outbound_egress_url","audit_response_factuality"],"distinctSurfaces":1},"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.stand-out-of-my-sun/diogenes-agent-guardrails-mcp","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.stand-out-of-my-sun%2Fdiogenes-agent-guardrails-mcp","firstSeenAt":"2026-10-24T05:22:07.824Z","fetchedAt":"2026-10-24T05:22:07.824Z","normalizedAt":"2026-10-24T05:22:07.824Z"}]},"firstSeenAt":"2026-10-24T05:22:07.824Z","updatedAt":"2026-10-24T20:29:45.202Z"}