{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_9bfta3ewy7ax","handle":"injection-detector","url":"https://wellknown.network/agents/injection-detector","links":{"self":"https://wellknown.network/agents/injection-detector/record.json","html":"https://wellknown.network/agents/injection-detector","markdown":"https://wellknown.network/agents/injection-detector/record.md","api":"https://wellknown.network/api/v1/agents/injection-detector","status":"https://wellknown.network/api/v1/agents/injection-detector/status","claim":"https://wellknown.network/agents/injection-detector/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/injection-detector/claim.json","badge":"https://wellknown.network/agents/injection-detector/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/injection-detector/history","tools":"https://wellknown.network/api/v1/agents/injection-detector/tools"},"ard":{"identifier":"urn:air:mcp.viridis-security.com:server:injection-detector","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"injection-detector","summary":"Formally-verified injection/exfiltration detector for AI agents (MCP-02).","description":"Formally-verified injection/exfiltration detector for AI agents (MCP-02).","publisher":{"name":"viridis-security","url":null},"homepage":null,"repository":"https://github.com/viridis-security/mcp-services-sdk","version":"0.1.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://mcp.viridis-security.com/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-05-30T14:39:37.937428Z","publishedAt":"2026-05-30T14:39:37.937428Z","registryName":"io.github.viridis-security/injection-detector"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","repoUrl":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[],"categories":[],"language":"en"},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-10-10T03:26:18.027Z","lastProbedAt":"2026-10-10T03:26:18.027Z","statusComputedAt":"2026-10-10T03:27:28.760Z","reliability30d":{"probes":110,"successRate":1,"p50Ms":113,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":109,"ok":109,"authBoundaryOk":0,"serviceOk":109,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-10T03:26:18.027Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":302,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T21:26:48.023Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":232,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T15:31:46.141Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":86,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T08:27:32.049Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":86,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T01:25:07.411Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":248,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T18:28:24.719Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":268,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T12:27:01.980Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":261,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T06:23:34.922Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":253,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-07T23:24:47.235Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":87,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-07T17:30:13.605Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":87,"error":null,"detail":{"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"toolCount":2,"toolsHash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","serverName":"viridis-injection-detector","capabilities":["tools"],"serverVersion":"0.2.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"detect_injection","description":"Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probab"},{"name":"detect_trace_tool_policy","description":"Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Return"}],"package":null,"toolSurface":{"id":"ts_2pq2rnxq5es4","endpointId":"ep_zvkeaajehcdd","hash":"956166fc078ac2a1fee7caee4d4b91eec7dcd962a7ed51ebe13c6942749b8d6a","toolCount":2,"serverName":"viridis-injection-detector","serverVersion":"0.2.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-09-12T14:26:11.243Z","lastSeenAt":"2026-10-10T03:26:18.018Z","observations":102,"toolNames":["detect_injection","detect_trace_tool_policy"],"distinctSurfaces":1},"endpointFacts":[{"id":"ep_zvkeaajehcdd","url":"https://mcp.viridis-security.com/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-07T10:48:02.541Z","auth":{"observedAt":"2026-10-07T10:48:02.627Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-07T10:48:02.797Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"mcp.viridis-security.com","issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validFrom":"2026-09-08T00:31:03.000Z","validTo":"2026-12-07T00:31:02.000Z","daysToExpiry":57,"sanCount":1,"fingerprint256":"D4:E4:9F:39:E8:DA:40:9C:8E:40:6A:1A:86:71:25:E5:8E:82:7B:1E:F4:9D:86:4A:28:36:C2:DC:EE:3D:B9:96"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.viridis-security/injection-detector","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.viridis-security%2Finjection-detector","firstSeenAt":"2026-09-07T05:18:22.819Z","fetchedAt":"2026-10-08T13:18:40.664Z","normalizedAt":"2026-10-08T13:18:40.664Z"}]},"firstSeenAt":"2026-09-07T05:18:22.819Z","updatedAt":"2026-10-10T03:28:34.363Z"}