1. Conduid
  2. RAG
  3. SCML
MCP server · RAG

SCML

· github.com/ravindu57/SCML

Production middleware for securing agentic AI systems. Enforces least-agency policy, scans for prompt injection, gates tool calls, and logs every decision to a tamper-evident SHA-256 chain. Evaluated against InjecAgent (1,054 cases), AgentDojo (949 cases), and memory poisoning (48 cases). Python + TypeScript SDKs.

Unclaimed agenticaiaiaisafetyaisecuritygaurdrailsllmsecuritymcpmcp-clientmcp-gatewaymcp-protocolmcp-securitymcp-servermcp-serversmcp-servicemcp-toolsmcpemiddlewareprompt-injectionragtoolcalling
InstallView source
34Low

Scored a month ago · breakdown

About SCML

SCML is an MCP server in the RAG category: production middleware for securing agentic AI systems. Enforces least-agency policy, scans for prompt injection, gates tool calls, and logs every decision to a tamper-evident SHA-256 chain. Evaluated against InjecAgent (1,054 cases), AgentDojo (949 cases), and memory poisoning (48 cases). Python + TypeScript SDKs.

Install

From source
git clone https://github.com/ravindu57/SCML

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (6)

check_memory_writeScore a memory write for integrity

Parameters not published.

get_audit_trailReplay session decisions with hash chain

Parameters not published.

get_policyShow active security policy

Parameters not published.

health_checkVerify SCML is running

Parameters not published.

redact_outputStrip PII and secrets from responses

Parameters not published.

scan_contentDetect prompt injection in external content

Parameters not published.

Ask AI

✦

Ask AI about SCML

Powered by Claude · Grounded in docs

I know everything about SCML. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About SCML

How do I install SCML?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is SCML safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is SCML still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.