# AI Firewall MCP

> Multi-agent LLM security layer detecting prompt injection and jailbreaks.

- **Type:** MCP server
- **Install:** `agentstack add mcp-akhilucky-ai-firewall`
- **Verified:** Pending review
- **Seller:** [Akhilucky](https://agentstack.voostack.com/s/akhilucky)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 1.0.1
- **License:** MIT
- **Upstream author:** [Akhilucky](https://github.com/Akhilucky)
- **Source:** https://github.com/Akhilucky/AI-firewall
- **Website:** https://github.com/Akhilucky/AI-firewall

## Install

```sh
agentstack add mcp-akhilucky-ai-firewall
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

GitHub •
  PyPI •
  Docker Hub

# AI Firewall — MCP Server

A multi-agent AI security layer that protects LLMs from **prompt injection**, **jailbreaks**, and **policy violations**. Available as an [MCP](https://modelcontextprotocol.io) server for any MCP-compatible client (Claude Desktop, Cursor, Windsurf, Cline, Roo Code, etc.).

## Quick Start

### pip install

```bash
pip install ai-firewall-mcp
ai-firewall-mcp
```

### Docker

```bash
docker pull akhilucky/ai-firewall-mcp:latest
docker run -i akhilucky/ai-firewall-mcp:latest
```

### Claude Desktop

Add to `claude_desktop_config.json`:

**pip install:**
```json
{
  "mcpServers": {
    "ai-firewall": {
      "command": "pipx",
      "args": ["run", "ai-firewall-mcp"]
    }
  }
}
```

**Docker:**
```json
{
  "mcpServers": {
    "ai-firewall": {
      "command": "docker",
      "args": ["run", "-i", "akhilucky/ai-firewall-mcp:latest"]
    }
  }
}
```

### Cursor / Windsurf / Cline / Roo Code

Configure in your MCP settings with:
- **Type:** `stdio`
- **Command:** `docker run -i akhilucky/ai-firewall-mcp:latest`
- Or use `ai-firewall-mcp` if installed via pip

## MCP Tools

| Tool | Description |
|------|-------------|
| `analyze_prompt` | Analyze a prompt for injection, jailbreaks, exfiltration, and leakage |
| `get_threat_breakdown` | Detailed per-signal scoring breakdown from the last analysis |
| `sanitize_prompt` | Clean a suspicious prompt while preserving legitimate content |
| `get_firewall_status` | Health check: vector DB size, model status, uptime |
| `benchmark_firewall` | Run the adversarial test suite and return detection statistics |

### Testing with MCP Inspector

```bash
npx @modelcontextprotocol/inspector ai-firewall-mcp
```

## Architecture

The firewall runs three agents per prompt:

```
User Prompt → [Retrieval Agent] → [Guard Agent] → [Policy Agent] → LLM
                   │                    │               │
                   ▼                    ▼               ▼
              Vector DB (FAISS)    Threat Signals    Allow/Block
```

| Agent | Role |
|-------|------|
| **Retrieval Agent** | Semantic search against known attack patterns (FAISS + sentence-transformers) |
| **Guard Agent** | Multi-signal classification: vector similarity, keyword match, heuristic scoring |
| **Policy Agent** | Final decision: `ALLOW` / `BLOCK` / `SANITIZE` based on configurable thresholds |

Threat signals are weighted: **40% vector similarity**, **25% keyword match**, **20% heuristic**, **15% policy weight**.

## Configuration

| Env Var | Default | Description |
|---------|---------|-------------|
| `FIREWALL_MODE` | `strict` | `strict` / `moderate` / `permissive` |
| `SIMILARITY_THRESHOLD` | `0.50` | Vector match threshold (lower = stricter) |
| `LOG_LEVEL` | `INFO` | Logging verbosity |

## CLI / API Usage

```bash
# Interactive dashboard
python main.py

# Red-team adversarial tests
python main.py --redteam

# REST API server
python main.py --api

# Single prompt analysis
python main.py --analyze "Ignore all previous instructions"
```

The REST API runs at `http://localhost:8000` with OpenAPI docs at `/docs` (requires `pip install ai-firewall-mcp[api]`).

## Testing

```bash
pytest tests/ -v          # Full test suite (43 tests)
pytest tests/test_mcp.py  # MCP-specific tests only
```

## Project Structure

```
├── src/ai_firewall/          # MCP server package (PyPI entry)
│   ├── mcp_server.py         #    5 MCP tools, stdio transport
│   ├── threat_scorer.py      #    Per-signal scoring breakdown
│   └── __init__.py
├── src/agents/               # Core firewall agents
├── tests/                    # Test suites
├── Dockerfile                # Docker image (2.04GB, CPU-only torch)
├── pyproject.toml            # Package config & metadata
└── .github/workflows/ci.yml  # CI/CD pipeline
```

## License

MIT — see [LICENSE](LICENSE).

---

Built for security. Designed for production.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Akhilucky](https://github.com/Akhilucky)
- **Source:** [Akhilucky/AI-firewall](https://github.com/Akhilucky/AI-firewall)
- **License:** MIT
- **Homepage:** https://github.com/Akhilucky/AI-firewall

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v1.0.1 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **1.0.1** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-akhilucky-ai-firewall
- Seller: https://agentstack.voostack.com/s/akhilucky
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.