prompt_guardLABSCO SUMMARY
Reputation, redaction and prompt guarding as tool calls, with an audit trail behind them.
prompt_guard and redact are the two that pair naturally with an agent — one screens what goes into the model, the other scrubs what comes out. The intelligence and embargo lookups turn an address, URL or hash into a verdict without leaving the thread, and log_entry writes the whole exchange to a verifiable trail.
What it is
A server over Pangea's security APIs, grouping AI Guard, threat intelligence, embargo screening, redaction, tamper-evident audit logging and Vault behind one tool set.
What you get
- prompt_guard — analyze and redact text to catch attempts to manipulate the model or smuggle content past it
- redact — strip sensitive information from text using defined rules
- lookup_domain_reputation and whois for domains
- lookup_ip_address_reputation, lookup_domain_from_ip_address, is_proxy, is_vpn and geolocate for IP addresses
- lookup_url_reputation for URLs and lookup_file_reputation for file hashes
- check_ip_embargo and check_iso_code_embargo against known sanction and trade-embargo lists
- log_entry and search_log against a tamper-evident audit log
- get_vault_item, list_vault_items, delete_vault_item and generate_key for secrets, tokens and cryptographic keys
Requirements
A Pangea account with the relevant services enabled, and a token that reaches all of them stored in Pangea Vault. The server is given a Vault token, the identifier of the Vault item holding that service token, and an audit-log configuration id. Runs under Node, over stdio or as an HTTP server with Pangea's own authentication optionally in front of it.
Setup effort
One command plus a key — npx -y @pangeacyber/mcp-server, then supply credentials
USE CASES
01
Screening text before it reaches the model
Run the prompt guard over untrusted input and act on what it flags or redacts.
02
Checking whether a domain or address is worth trusting
Look up the reputation, then confirm whether the address is a proxy or VPN and where it sits.
03
Screening a counterparty against sanctions
Check the IP address and country code against the embargo lists in one step.
04
Removing sensitive fields before sharing something
Redact the text against your rules rather than editing by hand.
05
Keeping a record of what the agent did
Write each significant action to the audit log and search it afterwards.
19 tools
Listed in project docs. Your client may show a different list.
lookup_domain_reputationwhoischeck_ip_embargocheck_iso_code_embargolookup_file_reputationlookup_ip_address_reputationlookup_domain_from_ip_addressis_proxyis_vpngeolocateredactlog_entrysearch_loglookup_url_reputationget_vault_itemlist_vault_itemsdelete_vault_itemgenerate_keyBEFORE YOU INSTALL
What to know first
Tools you get
19 tools named in the project's documentation.
Requires
- npx on PATH
- Node.js 24.11.0 or later
- PANGEA_VAULT_TOKEN in your environment
- PANGEA_VAULT_ITEM_ID in your environment
- PANGEA_AUDIT_CONFIG_ID in your environment
Where it runs
The documented client runs the server on your machine.
INSTALLATION
Connect your client
Server setup
TERMINAL
npx -y @pangeacyber/mcp-serverMCP Clients
Claude Desktop
CLAUDE DESKTOP · JSON
{
"mcpServers": {
"pangea": {
"command": "npx",
"args": [
"-y",
"@pangeacyber/mcp-server"
],
"env": {
"PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000",
"PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
"PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
}
}
}
}
