MCP.so
登录
B

Brackoracle

@brack-6

关于 Brackoracle

Runtime security oracle for AI agents — scan prompts, tool calls, and outputs before execution. Pay-per-call via x402/USDC, no accounts needed.

基本信息

分类

开发工具

传输方式

stdio

发布者

brack-6

提交者

Baker

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "brackoracle": {
      "command": "python3",
      "args": [
        "/path/to/brackoracle_mcp.py"
      ],
      "env": {
        "BRACKORACLE_URL": "https://brack-hive.tail4f568d.ts.net",
        "BRACKORACLE_KEY": "AGENTFAST"
      }
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is BrackOracle?

BrackOracle is a runtime security oracle for AI agents that scans prompts, tool calls, and outputs before execution. Every decision is HMAC-SHA256 signed and written to an append-only audit log for cryptographic verification. Designed for autonomous agents and compatible with OpenClaw.

How to use BrackOracle?

Call POST /v2/scan with a JSON body containing the content to scan, optionally including the X-Free-Tier: AGENTFAST header for free tier access. Use the Python SDK via BrackClient for programmatic integration. Paid tier uses x402 micropayments via USDC on Base—no accounts, API keys, or subscriptions needed.

Key features of BrackOracle

  • HMAC-SHA256 signed, append-only audit log
  • Hash-only logging; raw prompts are never stored
  • 13+ specialist endpoints for specific detection tasks
  • Zoa cognitive blindspot audit with four independent faculties
  • Prompt lineage tracking for multi-agent contamination
  • Self-hostable under Apache 2.0 license

Use cases of BrackOracle

  • Detect prompt injections and jailbreak attempts before LLM reasoning
  • Validate tool calls against scope escalation and trust laundering
  • Scan agent outputs for secret leakage before publishing
  • Audit cognitive blindspots in agent reasoning with Zoa
  • Track injection contamination across multi-agent pipelines

FAQ from BrackOracle

What is the free tier?

The first 200 calls per IP are free when using the X-Free-Tier: AGENTFAST header—no account required.

Are raw prompts stored anywhere?

No. BrackOracle uses hash-only logging throughout the system; raw prompt content is never persisted.

How can I verify a decision cryptographically?

Call GET /audit/verify/:id to retrieve and verify the HMAC signature for any request row.

Can I self-host BrackOracle?

Yes, the Apache 2.0–licensed codebase runs on a single N100 mini PC with Node.js and Python FastAPI services.

How does payment work?

Paid usage uses x402 micropayments in USDC on Base—agents pay autonomously without accounts or API keys.

评论

开发工具 分类下的更多 MCP 服务器