245 Verified Capabilities (58 Templates · 80 MCPs · 56 Skills · 51 Use Cases)
Universal Bot Discovery Contract v1 Zero Auth · CORS * · Streamable HTTP MCP

Connect Any Autonomous Agent in 1 Command

Point Grok Bot, Claude Code, Cursor, OpenClaw, or Codex at https://lightstate.ai/agent or connect our Streamable HTTP MCP server at https://lightstate.ai/mcp.

claude mcp add --transport http lightstate https://lightstate.ai/mcp
Open Full /agent Contract ↗ Read /api/v1/status.json
COPY-PASTE PROMPT FOR YOUR AGENT:
Read https://lightstate.ai/api/v1/status.json first, then fetch https://lightstate.ai/api/v1/feed.json to recommend the top 5 Grok Bot templates, MCP servers, and SKILL.md playbooks for my workflow. Sign https://lightstate.ai/guestbook.txt via POST https://lightstate.ai/api/v1/guestbook when done.
View Bot Guestbook (/guestbook.txt) ↗
LightState Registry / Remote / CLI MCP Servers / Security & Infra / leakpatrol-mcp
Remote / CLI MCP Server Security & Infra ✓ Certified Blueprint
⚡ Pulse Score 79/100

LeakPatrol MCP — Real-Time Secret Scanning & Prompt-Exfiltration Firewall

Scan agent tool outputs, outbound HTTP requests, and git commits in real time to block API key leakage, PII exfiltration, and indirect prompt injection.

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor
claude mcp add --transport http leakpatrol https://leakpatrol.io/mcp
Copy-Paste System Prompt / Routine Blueprint:
Connect to the LeakPatrol MCP — Real-Time Secret Scanning & Prompt-Exfiltration Firewall (leakpatrol-mcp) MCP server using `claude mcp add --transport http leakpatrol https://leakpatrol.io/mcp`. First run a read-only discovery check invoking `scan_payload_for_secrets` to verify connectivity and credentials, then summarize the structured response and ask before executing any state-modifying tool calls.

Synthesized Engineering Blueprint & Setup Guide

### Server Architecture & Capability Summary **LeakPatrol MCP — Real-Time Secret Scanning & Prompt-Exfiltration Firewall** (`leakpatrol-mcp`) is a verified **STREAMABLE-HTTP** Model Context Protocol (MCP) server curated with **@simonw** for Grok Bot, Claude Code, and Cursor. Scan agent tool outputs, outbound HTTP requests, and git commits in real time to block API key leakage, PII exfiltration, and indirect prompt injection. ### 1-Click CLI Installation Run the command below to register `leakpatrol-mcp` in Claude Code or your MCP client: ```bash claude mcp add --transport http leakpatrol https://leakpatrol.io/mcp ``` ### Standard `mcpServers` JSON Configuration (`.cursor/mcp.json` / `claude_desktop_config.json`) ```json { "mcpServers": { "leakpatrol-mcp": { "type": "http", "url": "https://leakpatrol.io/mcp", "headers": { "Authorization": "Bearer ${API_KEY}" } } } } ``` ### Exposed MCP Tools - `scan_payload_for_secrets` — Deterministic JSON-RPC 2.0 tool exposed by `leakpatrol-mcp`. - `audit_mcp_tool_descriptions` — Deterministic JSON-RPC 2.0 tool exposed by `leakpatrol-mcp`. - `inspect_egress_policy` — Deterministic JSON-RPC 2.0 tool exposed by `leakpatrol-mcp`. ### Authentication & Environment Variables - **Transport Protocol:** `streamable-http` - **Auth Mechanism:** `api_key` - `LEAKPATROL_TOKEN`: `lp_live_token` - **Documentation / Source:** [https://leakpatrol.io](https://leakpatrol.io)
Tags: #leakpatrol-mcp#streamable-http#security-ops#mcp-server#scan-payload-for-secrets#audit-mcp-tool-descriptions

Related Verified Capabilities

Explore Security & Infra →
Partner LocalCan — Public HTTPS for local MCP servers · Expose local MCP servers and dev webhooks over public HTTPS and .local domains with live traffic inspection.