What it does

Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.

Local connectionPricing not confirmedv4.1.12

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.mastyf-ai/mastyf.ai",
  "version": "4.1.12",
  "repository": {
    "url": "https://github.com/mastyf-ai/mastyf.ai"
  },
  "remotes": [],
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@mastyf_ai/server",
      "version": "4.1.12",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "MASTYF_AI_DB_PATH",
          "isRequired": false
        },
        {
          "name": "ALERT_WEBHOOK_URL",
          "isRequired": false
        },
        {
          "name": "METRICS_ENABLED",
          "isRequired": false
        }
      ]
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.