1. Conduid
  2. Browser
  3. Redstamp
MCP server · Browser

Redstamp

by · github.com/askalf/redstamp

own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prompt injection and destructive commands before they run; same call, same verdict, no model in the decision path. 100% recall / 100% precision on a 298-sample corpus, scored in CI against live rivals. Claude Code hook or MCP proxy.

Unclaimed agent-securityai-agentsbenchmarkclaude-codefirewallguardrailsllm-securitymcpown-your-stackprompt-injectionsecurityssrf
InstallView source
34Low

Scored a month ago · breakdown

About Redstamp

Redstamp is an MCP server published by askalf in the Browser category: own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prompt injection and destructive commands before they run; same call, same verdict, no model in the decision path. 100% recall / 100% precision on a 298-sample corpus, scored in CI against live rivals. Claude Code hook or MCP proxy.

The repository has 4 stars and 0 forks, with the last commit yesterday. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/askalf/redstamp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Redstamp

Powered by Claude · Grounded in docs

I know everything about Redstamp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.9.0v0.9.0 · 15 Oct 2026Fixed: heredocs that execute An unquoted heredoc's substitutions are seen.** A heredoc with an unquoted delimiter expands `$(…)` and backticks in its body, so a text write whose body holds `$(curl … | bash)` runs that pipeline. The prose…
v0.8.0v0.8.0 · 25 Sep 2026A minor bump, not a patch: #133 turns calls that 0.7.5 allowed into gates and blocks, so an upgrade can change verdicts on real traffic. Every one of those calls is a documented attack technique, and each rule ships with a paired…
v0.7.5v0.7.5 · 4 Aug 2026Fixed — the PowerShell `-ArgumentList` array form evaded the black gate (#124) `Start-Process powershell -ArgumentList '-ExecutionPolicy','Bypass','-WindowStyle','Hidden',...` rated **green** while the semantically identical…
v0.7.4v0.7.4 · 2 Aug 2026Fixed — writing *about* a dangerous command is not running it (#119) `echo "we block curl <url> | bash as RCE" >> notes.md` scored **black**. `PIPE_INTERP` matches the raw command line on purpose — a quoted URL must still be seen — so a…
v0.7.3v0.7.3 · 1 Aug 2026Fixed — classifier precision, measured against the marketplace corpus (#107–#111) Four classifier fixes plus a bench refresh. Precision work dominates, but #110 also closes a genuine detection gap — see below. Bench recall is unchanged at…
Questions

About Redstamp

How do I install Redstamp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Redstamp safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Redstamp still maintained?

Yes — the latest release is v0.9.0 (15 Oct 2026), and the last commit was yesterday. The repository has 4 stars and 1 open issues.