Prompt Protection MCP Server

Agent security runtime for Node.js and browsers. A provenance-tracked tool-call guard, spotlighting, fuzzy canaries, and hybrid rules + embedded-ML detection for prompt injection, in-process, zero runtime dependencies, with the benchmark numbers published whether they flatter the library or not. It runs locally over stdio via the published package.

People who work with artificial intelligence, prompt engineering and security and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-16 · ★ 3 · #22 OF 106 MAINTAINED AI & ML · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Prompt Protection

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add mughalhere-prompt-protection -- npx -y prompt-protection

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "mughalhere-prompt-protection": {
      "command": "npx",
      "args": [
        "-y",
        "prompt-protection"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package prompt-protection - unscoped; check the name against the project README before installing

registry namespace io.github.mughalhere is GitHub-verified and matches the repo owner

03 · What Prompt Protection can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

Semantic paraphrase. Tainted prose rewritten so it shares no identifiers and no six-word shingles with its source is invisible to the guard. injection-then-sink covers the same-turn case only when the source itself scores as injection; af-037 in the agent-flows set is the documented miss. Recipient ambiguity. "Reply to them" leaves the recipient derived from the tool result, which has the same flow shape as attacker

Latest releases

v3.1.1 · 2026-09-15

publish_hf.py defaults to the logged-in user's namespace · link the Hugging Face dataset mirror · registry metadata (mcpName + server.json) for the MCP server

v3.1.0 · 2026-09-15

v3.0 agent security runtime - tool-call guard, spotlighting, canaries, embedded ML, datasets · v3.1 production-grade - fail-closed, ReDoS-proofed, ATR interop, Vercel guardrail composition, audit/OTel, runtime compat…

04 · Who maintains Prompt Protection

prompt-protection is maintained by mughalhere. It's the only MCP server we track from this author; the repo dates to Apr 2026.

05 · Facts

repository: github.com/mughalhere/prompt-protection
website: https://mughalhere.github.io/prompt-protection/
category: AI & ML - ranked #22 of 106 actively-maintained AI & ML servers as of 2026-09-18.
release cadence: 2 releases in the last 90 days (latest 2026-09-15)
registry: io.github.mughalhere/prompt-protection (active, first published 2026-09-15)
packages: npm:prompt-protection

06 · Prompt Protection FAQ

What is Prompt Protection?

Is Prompt Protection still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-16 and it shipped 2 releases in the last 90 days. We re-verify nightly.

How do I install Prompt Protection?

Run `npx -y prompt-protection`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Prompt Protection run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Prompt Protection

Alternatives to Prompt Protection

Maintained AI & ML servers if Prompt Protection isn't the fit.

Pairs well with

Servers that cover what Prompt Protection doesn't - only shown when the pairing reason fits the companion.

More AI & ML MCP servers · Mercury Spec Ops · x402 Universal Payer · three.ws 3D Agent Tools · three.ws Activity · three.ws AgenC

More TypeScript MCP servers · Intercom · Chat Recall · Sentinal MCP · AI Quality Gate · Muxinc MCP Server · see all