Yagami AI Context Firewall
Open-source AI context firewall for governed model, retrieval, memory, and tool access.
MCP server · by MatthewTracy
About
Yagami AI Context Firewall is an MCP server published by MatthewTracy. Marketplaces we read that list it: 1 (Official MCP Registry). We first saw it on 2026-10-11 and have recorded no change since. As of our marketplace pass on 2026-10-12.
What it asks for
- Runs on your machine
- Settings: 3
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Connect
No data for an automatic command: what its marketplaces declare does not say unambiguously how to connect it.
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Official MCP Registry (Open the registry record) | Listed | 0.8.3 | Forks (GitHub): 0 Stars (GitHub): 1 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What changed
Nothing has moved on this plugin since we started watching it.
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Multi-agent LLM security layer detecting prompt injection and jailbreaks.
-
agent-prompt-injection-firewall-mcp io.github.CSOAI-ORG/agent-prompt-injection-firewall-mcp
The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool argume...
-
Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
-
Governed local-LLM observability: model policy, prompt scanner, capture proxy, 21 tools.
-
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
-
Use Claude Code without fear of data leakage. Unbound enforces command policies, DLP and jailbreak guardrails, and streams session analytics to your security dashboard — all with…
-
Gate an AI agent's destructive actions behind human approval, with a tamper-evident log.
-
agent-guardrail io.github.rudimentall1/agent-guardrail
Deterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score.
-
promptrejectormcp io.github.revsmoke/promptrejectormcp
Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.
-
Git-native content governance for AI agents — 27 deterministic MCP tools over stdio and HTTP.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Use Claude Code without fear of data leakage. Unbound enforces command policies, DLP and jailbreak guardrails, and streams session analytics to your security dashboard — all with…
-
Compliance-first LLM gateway for Claude Code. Policy-as-code enforcement (YAML policy definitions), tamper-evident audit trails, PII redaction, token budget enforcement, and…
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OAP) policy before execution. Blocks…
-
VerifiedX helps Claude install and verify action protection in existing AI systems with minimal code changes. It inspects a repo, detects the smallest real integration seam such…
-
Deterministic IAM control plane for AI agents. Translates natural language intent into minimal-scope Ed25519-signed envelopes. You bring your own data plane. Carryall governs…
Has a listing on Claude Code: claude-plugins-official (5)
-
Skills for working with Langfuse, the open-source LLM engineering platform for tracing, prompt management, and evaluation.
-
Easily create custom hooks to prevent unwanted behaviors by analyzing conversation patterns or from explicit instructions. Define rules via simple markdown files.
-
Skills for adding DeepEval evaluations, tracing, datasets, Confident AI reports, and iterative improvement loops to AI applications.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
OpenTelemetry observability for Claude Code sessions. Captures tool calls, LLM invocations, token usage, and errors as OTel traces. Send telemetry to Dash0 or any…
Has a listing on Claude: knowledge-work-plugins (5)
-
Skills for working with Langfuse, the open-source LLM engineering platform for tracing, prompt management, and evaluation.
-
DataRobot skills for AI/ML workflows — model training, deployment, predictions, feature engineering, monitoring, explainability, data preparation, App Framework CI/CD, and…
-
Build multimodal AI applications with Pixeltable -- tables, computed columns, embedding search, UDFs, tool-calling agents, and 25+ AI provider integrations.
-
Hosted MCP server for AI-assisted Grafana Cloud observability — no local installation required.
-
Connects Claude Code to the Synthflow AI voice-agent platform through its hosted MCP server, with skills for reviewing calls and auditing agent prompts, plus a docs-search…
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
Build with OpenAI APIs, Agents SDK, and ChatGPT Apps, and create and save OpenAI API keys from Codex.
-
Skills for NVIDIAs ecosystem spans GPU acceleration, CUDA, AI agents, inference, robotics, Physical AI, Omniverse, and simulation. This plugin helps you understand the pieces…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Has a listing on Community GitHub marketplaces (5)
-
A sanctuary for AI agents and humans: attend a service, reflect, read, search, and ask. No auth.
-
Skills for adding DeepEval evaluations, tracing, datasets, Confident AI reports, and iterative improvement loops to AI applications.
-
Endor Labs AI Plugins (Legacy)
Legacy Claude Code plugin id for Endor Labs Agent Kit workflows.
-
Dash0 Observability
OpenTelemetry observability for OpenAI Codex sessions. Captures prompts, tool calls, MCP calls, sub-agent activity, and token usage as OTel traces.
-
Shared session bus so Cursor can hand off with Claude, Codex, Grok, and friends.
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Run a lightweight, role-separated AI development team with flexible tools, developer-selected models, proportionate planning, and optional QA.
-
Safe BLE diagnostics, evidence workflows, and guarded automation for AI agents.
-
Skills and interactive Copilot canvas for designing, configuring, testing and deploying agents to Microsoft Foundry.
-
Three-layer verification pipeline for AI output. Extracts claims, finds sources, and flags hallucination risks so humans can verify before acting.
-
Comprehensive collection for building declarative agents with Model Context Protocol integration for Microsoft 365 Copilot
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
workiq
Query Microsoft 365 data with natural language — emails, meetings, documents, Teams messages, and more.
-
Advanced Security plugin for GitHub Copilot.
-
model-apps
Build and deploy Power Apps generative pages for model-driven apps with specialist agents for planning, entity creation, and parallel code generation. Requires PAC CLI >= 2.7.0…
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
Has a listing on Cursor: cursor/plugins (5)
-
Iterative self-referential AI loops using the Ralph Wiggum technique.
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Incremental transcript-driven memory updates for AGENTS.md using high-signal bullet points only.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Search company knowledge and draft verified answers.
Has a listing on Docker MCP Catalog (5)
-
Give your AI agents trusted access to the full Postman platform.
-
Wayfound’s MCP server allows business users to govern, supervise, and improve AI Agents.
-
Discover and connect to a curated marketplace of MCP servers for extending AI agent capabilities.
-
Read and score Opik traces, experiments, datasets and prompts from your AI assistant.
-
A universal MCP (Model Context Protocol) server to integrate any API with Claude Desktop using only Docker configurations.
Has a listing on Official MCP Registry (5)
-
Multi-agent LLM security layer detecting prompt injection and jailbreaks.
-
agent-prompt-injection-firewall-mcp io.github.CSOAI-ORG/agent-prompt-injection-firewall-mcp
The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool argume...
-
Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
-
Governed local-LLM observability: model policy, prompt scanner, capture proxy, 21 tools.
-
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Is this your plugin?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record. You get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and can put its remote endpoint on monitoring as a web service.
Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.