Moltline Agent Governance
Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
| Endpoint | https://mcp.moltlinestudio.com/govern (streamable-http) |
|---|---|
| Registry version | 1.2.0 |
| Now | 8 tools · grade D (68) · pin ts_a6a380d2bd7a3b9ba2c2cc25a8a28f8c · protocol 2025-06-18 |
| First / last listed | 2026-10-28 00:17 UTC / 2026-10-28 00:17 UTC |
| Grade over time | 2026-10-28: D (68), 8 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: audit_mcp_config scope_check audit_skill_file injection_scan inventory_report governance_policy get_auditor_persona agent_readiness_scan
audit_mcp_config | Audit an MCP server config for risk-ranked posture findings. FREE.
Flags exposed machine credentials in the config, required inputs that
aren't gated/optional, unpinned versions, over-broad env access, and
dangerous auto-run flags. It never echoes any matched secret value back.
Typical input {"config": "<mcpize.yaml, mcp.json, or a Claude/Cursor
servers block>"} returns {"posture_score": 0-100, " params: config* |
scope_check | Score the blast radius of every tool in a permission manifest. FREE.
Ranks each tool by capability risk (command exec > money/delete >
file-write/messaging > read > network) and flags the over-privileged
ones that need approval gates. Typical input {"tools": "[\"run_shell\",
\"read_docs\"]"} returns {"tools_scored": N, "high_risk_tools": N,
"ranking": [{"tool": ..., "blast_radius": 0-5, "capabili params: tools* |
audit_skill_file | Audit an agent skill or instruction file before you trust it. FREE.
Checks for governance smells: prompt-injection and guardrail-bypass
phrasing, concealment instructions ('don't tell the user'), exfiltration
language, and exposed credential material. Typical input {"content":
"<SKILL.md, system prompt, or tool description text>"} returns
{"verdict": "reject: do not install" | "no governance red params: content* |
injection_scan | Scan untrusted text for prompt-injection patterns before ingestion. FREE.
Use on any web page, email, or document an agent is about to ingest to
catch prompt-injection and data-exfiltration patterns before they reach
the agent's context. Typical input {"text": "<untrusted content>"}
returns {"injection_suspected": bool, "count": N, "hits": [{"line": N,
"pattern": "...", "text": "<flagged line>"}] params: text* |
inventory_report | Build a governance inventory with risk tiers from a raw agent list. FREE.
Turns a list of agents / MCP servers / skills into an audit-ready
summary with critical/elevated/standard tiers and unowned-agent flags.
Typical input {"items": "[{\"name\": \"deploy-bot\", \"owner\":
\"ana\"}]"} returns {"total": N, "tiers": {"critical": N, ...},
"unowned_agents": [...], "inventory": [{"name": ..., "owner" params: items* |
governance_policy | Generate an audit-ready agent-governance policy for a fleet. PREMIUM (license).
Covers inventory cadence, ownership rules, least-privilege approval
gates, injection defense, logging/retention, and decommissioning
triggers. Typical input {"fleet_context": "20 agents, 3 with shell
access, one finance bot"} returns {"policy": ..., "sections": {...},
"context_note": ..., "audit_checklist": ["...", .. params: fleet_context |
get_auditor_persona | Load the Governance Auditor persona for consistent fleet audits. PREMIUM (license).
The persona is methodical, evidence-driven, and allergic to 'it's
probably fine'. Takes no arguments. Returns {"persona": ...,
"identity": ..., "rules": ["...", ...], "opening_move": "..."} ready to
adopt as a system prompt.
Use to keep repeated audits consistent in voice and rigor. Not for running
an audit - the params: none |
agent_readiness_scan | Score a public domain against 21 agent-readiness checks. FREE.
Use when you need to know whether an autonomous agent can discover, read,
use or pay a website - your own, or a vendor you are evaluating before
recommending it. Typical input {"domain": "example.com"} returns
{"score": 8, "total": 21, "grade": "F", "passed": [...], "failed":
[{"title": "...", "detail": "...", "fix": "..."}], "report_ params: domain* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.