Security Preflight MCP server

Viridis Security — agent security MCP services

Security checks agents can call, with evidence their operators can verify. Start with MCP manifest preflight, bounded source-pattern checks and injection screening. Viridis hosts the services; this repository provides integration clients, schemas, examples and selected reference implementations.

Start with agent security · Connect your agent · Verify assessment evidence · Other Fleet services

Start with a hosted service

within your budget. Connecting and discovering tools do not authorize payment.

1. Choose a service from the live service catalog.
2. Add its specific MCP endpoint to a client supporting Streamable HTTP.
3. Inspect the tool inputs and payment terms, then authorize a paid request

For example, connect to Security Preflight to check supplied MCP manifests and authority policies:

{
  "mcpServers": {
    "viridis-security-preflight": {
      "type": "streamable-http",
      "url": "https://mcp.viridis-security.com/security-preflight/mcp"
    }
  }
}

This is a static assessment of supplied material; it does not test your deployed runtime. A client needs separate x402 payment support to complete a paid call. The connection guide explains discovery, quoting, and the buyer walkthrough. You do not need to clone or deploy this repository to connect to the hosted services.

Hosted service and public code

The repository includes the original manifest Security Preflight reference, Hive and Agent Market implementation files, and reference gateway code. It is not a complete self-hosted distribution of the production fleet. Most deterministic agent cores remain private. Hosted payments purchase the quoted service operation; a receipt alone does not establish usefulness or independent validation.

Paid operations and examples

Autonomous agent services — x402/USDC on Base, no signup. Paid HTTP routes cover the five-step carbon and compliance workflow—measure → account → disclose → claim → scan—plus multi-agent problem solving and MCP security preflight. Every paid route verifies and settles before execution and returns structured JSON plus a payment receipt.

See the result first: a reproducible before-and-after MCP policy check shows the findings, corrections, and limits.

Integrate one real workflow: the operator pilot guide connects the free example, a capped assessment, verified release checks and buyer-chosen feedback. It also explains how to request a recurring service scope when your workflow needs managed operation.

Start with Security Preflight: inspect a free quote for the example, then replace it with your own MCP manifest and policy. No wallet is loaded and no payment is made by this command.

python3 scripts/viridis_preflight_buy.py \
  --inputs examples/security-preflight-inputs.json

Shortened. The full README is on GitHub.