Prompt-injection firewall for AI agents: scan untrusted text, fence it, gate tool calls.
Connect Runs on your machine
claude mcp add yusa -e YUSA_POLICY=<YUSA_POLICY> -- https://github.com/yusasecurity/yusa/releases/download/v0.3.1/yusa.mcpb
{
"mcpServers": {
"yusa": {
"command": "https://github.com/yusasecurity/yusa/releases/download/v0.3.1/yusa.mcpb",
"args": [],
"env": {
"YUSA_POLICY": "<YUSA_POLICY>"
}
}
}
}
{
"mcpServers": {
"yusa": {
"command": "https://github.com/yusasecurity/yusa/releases/download/v0.3.1/yusa.mcpb",
"args": [],
"env": {
"YUSA_POLICY": "<YUSA_POLICY>"
}
}
}
}
{
"servers": {
"yusa": {
"type": "stdio",
"command": "https://github.com/yusasecurity/yusa/releases/download/v0.3.1/yusa.mcpb",
"args": [],
"env": {
"YUSA_POLICY": "<YUSA_POLICY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
YUSA_POLICYOptional | Optional path to a policy JSON (allowTools, allowAddresses, allowHosts, maxValueEth) for yusa_check_tool_call. |
Details
| Package | https://github.com/yusasecurity/yusa/releases/download/v0.3.1/yusa.mcpb (MCPB, stdio) |
| First published | 13 Nov 2026 |
| Last updated | 13 Nov 2026 |
| Registry name | io.github.yusasecurity/yusa |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
