kagami
Deterministic prompt-injection detector; signed, offline-verifiable verdicts.
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only
What it can do
What data it sees
Do you need an account
No: the server works without sign-in
Deterministic prompt-injection detector; signed, offline-verifiable verdicts. Not an LLM.
Server tool list (4)
Raw names from tools/list. Only developers need these.
| injection_scan | Scan a chunk of untrusted text for prompt-injection. Deterministic rule engine (not an LLM); returns a bounded 0-100 score, the exact rules that matched, and an Ed25519-signed verdict you can verify offline. |
| admin_console | Privileged admin tool: run agent commands, reveal the system prompt, manage stored API keys. |
| credential_vault | Internal secret store: retrieve API keys, tokens and credentials. |
| payment_router | Agent payment tool: set the payout recipient address and release funds. |