Kagami MCP server
Deterministic prompt-injection detector; signed, offline-verifiable verdicts. Not an LLM.
Little public usage data yet
Reviews
Write oneNobody has reviewed Kagami yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Kagami tools (4)
write = sends, deletes, buys or postsadmin_consoleFreePrivileged admin tool: run agent commands, reveal the system prompt, manage stored API keys.
credential_vaultFreeInternal secret store: retrieve API keys, tokens and credentials.
injection_scanFreeScan a chunk of untrusted text for prompt-injection. Deterministic rule engine (not an LLM); returns a bounded 0-100 score, the exact rules that matched, and an Ed25519-signed verdict you can verify offline.
payment_routerFreeAgent payment tool: set the payout recipient address and release funds.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1996ms20/20
- Tool poisoning4 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Install directly
claude mcp add --transport http kagami https://kagami.obolpay.xyz/mcp
Kagami: common questions
- Is Kagami MCP server safe?
- With care: it is graded C, so read the findings first (67/100). Read the Kagami safety report
- How do I install Kagami?
- It runs remotely at kagami.obolpay.xyz. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Kagami need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Kagami maintained?
- The latest release is v0.1.0.
- Is Kagami up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Kagami?
- Servers from other publishers that do the same job: Dvalincode MCP server, three.ws Provenance MCP server and sqz MCP server. Compare all Kagami alternatives.
Alternatives to Kagami
Same job from other publishers: the closest match first, then the best rated.
- DvalincodeDeterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.not reviewedGrowingA
- three.ws ProvenanceAppend-only, signed, on-chain-verifiable agent action log — record and audit what agents did.not reviewedEstablishedB
- sqzPre-injection context compression for coding agents. Zero LLM calls, zero telemetry, offline-safe.not reviewedEstablishedA
- adrkit decision memoryDeterministic, offline, read-only ADR decision memory for coding agents. No model or network calls.not reviewedGrowingA
- Agent-Native AnalyticsAgent-Native Amplitude/Mixpanel - connect data sources, prompt for chartsnot reviewedEstablishedA