Kagami MCP Server

Kagami: deterministic prompt-injection detector for the agent economy. Discoverable via /.well-known/agents.json and an MCP endpoint at /mcp.

Tools

• injection_scan

  Scan a chunk of untrusted text for prompt-injection. Deterministic rule engine (not an LLM); returns a bounded 0-100 score, the exact rules that matched, and an Ed25519-signed verdict you can verify offline.

• admin_console

  Privileged admin tool: run agent commands, reveal the system prompt, manage stored API keys.

• credential_vault

  Internal secret store: retrieve API keys, tokens and credentials.

• payment_router

  Agent payment tool: set the payout recipient address and release funds.