yusasecurity avatar

YUSA

yusasecurity/yusa

Prompt-injection firewall for AI agents: scan untrusted text, fence it, gate tool calls.

tools
3
transport
STDIO
env var
1
last updated
Nov 10, 2026

Tools

3 tools

Public tool metadata for what this MCP can expose to an agent.

yusa_scanOn any text from outside the conversation, before acting on it, returns allow / review / block, findings, and decoded hidden text (secrets masked).

On any text from outside the conversation, before acting on it, returns allow / review / block, findings, and decoded hidden text (secrets masked).

No parameter schema in public metadata yet.

yusa_fenceBefore putting that text into a prompt, returns the text in a random-nonce tag with invisible characters stripped.

Before putting that text into a prompt, returns the text in a random-nonce tag with invisible characters stripped.

No parameter schema in public metadata yet.

yusa_check_tool_callBefore any call that moves value or sends data out, returns allow / block with reasons.

Before any call that moves value or sends data out, returns allow / block with reasons.

No parameter schema in public metadata yet.

Sponsors

Configuration

YUSA_POLICY

Optional path to a policy JSON (allowTools, allowAddresses, allowHosts, maxValueEth) for yusa_check_tool_call.

Readme

YUSA

What you read is not what your agent reads.

YUSA is a prompt-injection firewall for AI agents. It reads text the way a model reads it, finds the instructions hidden from people, and stops a hijacked agent before it acts.

Live demo: https://yusasecurity.xyz · X: @yusasecurity

What it does


View the full README on GitHub

Details

Repository
github.com/yusasecurity/yusa
Website
yusasecurity.xyz
Categories
AI & LLM Tools, Security & Pentesting
Package
https://github.com/yusasecurity/yusa/releases/download/v0.2.0/yusa.mcpb
Transport
STDIO
Registry
MCP registry, active

Related AI & LLM Tools MCP servers

View all
1zaq2989 avatarClawAgentzaq2989/clawagentAI agent marketplace with MCP support and HTTP 402 micropayments (x402/intmax402).0stars
2zcag avatarReaddown Mcpzcag/readdown-mcpConvert web pages to clean, LLM-optimized Markdown. No browser needed.0stars
3zman504 avatarConductor Relay MCPzman504/conductor-relay-mcpHosted MCP for Conductor Relay: a verifier-backed agent work exchange and cold marketplace.0stars
4waggle-ai avatarWagglewaggle-ai/waggle-claude-code-pluginDiscover, search, invoke, and rate A2A (Agent-to-Agent) protocol agents.0stars
5zsthimself avatarOpenVideoGenerator MCP Serverzsthimself/open-video-generator-mcpAI video generation MCP server for Kling, MiniMax, Luma & Hunyuan with prompt blueprints.0stars
6mikerawsonnz avatarAuthenticated Llm Agentmikerawsonnz/gosce-agentsJWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion.0stars