Power Strip Security

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Computer or cloud
• Transport: stdio, Streamable HTTP
• Category: Cybersecurity
• You need to fill in: PSS_PRIVATE_KEY

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet
• npmNode.js installed (for the npx command)

Which app do you use?

https://api.powerstripsecurity.workers.dev/mcp

{
  "mcpServers": {
    "power-strip-security": {
      "command": "npx",
      "args": [
        "-y",
        "power-strip-security-mcp"
      ],
      "env": {
        "PSS_PRIVATE_KEY": "your-value",
        "PSS_MAX_SPEND_USD": "your-value"
      }
    }
  }
}

claude mcp add --transport http power-strip-security https://api.powerstripsecurity.workers.dev/mcp

claude mcp add power-strip-security --env PSS_PRIVATE_KEY=your-value --env PSS_MAX_SPEND_USD=your-value -- npx -y power-strip-security-mcp

{
  "mcpServers": {
    "power-strip-security": {
      "url": "https://api.powerstripsecurity.workers.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "power-strip-security": {
      "command": "npx",
      "args": [
        "-y",
        "power-strip-security-mcp"
      ],
      "env": {
        "PSS_PRIVATE_KEY": "your-value",
        "PSS_MAX_SPEND_USD": "your-value"
      }
    }
  }
}

{
  "servers": {
    "power-strip-security": {
      "type": "http",
      "url": "https://api.powerstripsecurity.workers.dev/mcp"
    }
  }
}

{
  "servers": {
    "power-strip-security": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "power-strip-security-mcp"
      ],
      "env": {
        "PSS_PRIVATE_KEY": "your-value",
        "PSS_MAX_SPEND_USD": "your-value"
      }
    }
  }
}

https://api.powerstripsecurity.workers.dev/mcp

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• PSS_PRIVATE_KEY secret required env
  Private key (0x...) of a dedicated wallet with a little USDC on Base
• PSS_MAX_SPEND_USD env
  Spending cap per session in US dollars (default 1)

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.

• read_url

  Fetch a public web page or PDF with hidden text and exfiltration links removed, plus a prompt-injection report. Use it instead of fetching untrusted URLs yourself; for content you already have, use check_prompt_injection. Returns risk (0-1), level, findings, content and wrapped_t

• check_prompt_injection

  Scan HTML or text you already have (an email, a document, a tool result, a page fetched elsewhere) for prompt injection before it reaches your prompt. To fetch a URL, use read_url instead; for MCP tool definitions or skill files, use audit_mcp_server or audit_agent_skill. Returns

• audit_mcp_server

  Check an MCP server for tool poisoning before connecting: hidden instructions, sensitive-file access, exfiltration parameters, cross-tool shadowing, rug pulls. For skills or AGENTS.md use audit_agent_skill. Give url (tools are listed read-only, never called) or the pasted tools,

• audit_agent_skill

  Check an agent skill (SKILL.md with its scripts and references) or AGENTS.md, CLAUDE.md, .cursorrules before loading it: prompt injection, curl | bash, encoded commands, credential theft, exfiltration, hardcoded keys, persistence. For MCP servers use audit_mcp_server. Give files

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 9, 2026

• ! Caution

  Maker matches the repo

  The publisher (AlbertBalestrini) is not the repo owner (AlbertBalestrini); someone else may have listed it

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 150 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 4 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

• More stars than 0% of the other 1003 servers in this category
• Published to the registry more recently than 80% of the other 1003 servers in this category
• Basic checks equal to or better than 33% of the other 1003 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo