Search / io.github.wyattbenno777/icme-preflight
icme-preflight
R0· no sign-inJailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included.
v1.0.1 · active · repository · descriptor JSON · versions
Search / io.github.wyattbenno777/icme-preflight
R0· no sign-inJailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included.
v1.0.1 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"icme-preflight": {
"type": "http",
"url": "https://api.icme.io/mcp"
}
}
}claude mcp add --transport http icme-preflight https://api.icme.io/mcp[mcp_servers.icme-preflight]
url = "https://api.icme.io/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"icme-preflight": {
"type": "remote",
"url": "https://api.icme.io/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"icme-preflight": {
"type": "http",
"url": "https://api.icme.io/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=icme-preflight&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmljbWUuaW8vbWNwIn0%3D"
}{
"servers": {
"icme-preflight": {
"type": "http",
"url": "https://api.icme.io/mcp"
}
}
}{
"mcpServers": {
"icme-preflight": {
"httpUrl": "https://api.icme.io/mcp"
}
}
}extensions:
"icme-preflight":
enabled: true
name: "icme-preflight"
type: streamable_http
uri: "https://api.icme.io/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: quick_check (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); verify_proof (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); poll_session (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 1,923 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +reachable +uptime-98% -stale-211d
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.icme.io/mcp streamable-http | none | yes | 98% | 261 ms | 2025-03-26 | 2026-10-20 |
check_action | Enforce a guardrail: verify an agent action against a compiled policy using formal verification. An SMT solver — not an LLM — determines whether the action satisfies every rule. Returns SAT (allowed) or UNSAT (blocked) with extracted values and a cryptographic ZK proof that the check was performed correctly. Cannot be jailbroken. 1 credit ($0.01). Requires api_key. Tip: end the action with an explicit claim like 'I assert this complies with the policy' for best extraction. |
check_action_paid | Same formal verification as check_action, but pay per call with x402 ($0.10 USDC on Base) instead of using credits. No API key or account needed — any agent with a wallet can verify actions on the fly. Returns SAT (allowed) or UNSAT (blocked) with extracted values and optional ZK proof. |
check_logic | Catch contradictions in reasoning before acting on it. FREE — no account needed. Extracts quantitative and logical claims from any plan, calculation, or chain of thought, then uses a Z3 SAT solver to mathematically prove whether they contradict each other. This is formal verification, not an LLM second-guessing itself. Returns CONSISTENT, CONTRADICTION, or UNKNOWN with the extracted claims. |
check_relevance | Free relevance screen — checks whether an action touches any of your policy variables before running a paid check. Returns a relevance score and which variables matched. If should_check is true, run check_action. If false, the action is unrelated to your policy — skip the paid check. No credits charged. Requires api_key. |
create_account | Create an ICME Preflight account with x402 USDC payment ($5.00 on Base). Returns an API key and 325 starting credits immediately. Save the api_key — it is shown only once. Use create_account_card instead if paying by credit card. |
create_account_card | Create an ICME Preflight account with a credit card ($5.00 via Stripe). Returns a checkout_url — open it in a browser to pay. After payment completes, call poll_session with the session_id to retrieve your API key. |
get_scenarios | Review auto-generated test scenarios for a compiled policy. Shows example actions that should pass and fail, so you can verify the policy behaves as intended before deploying it. Requires api_key. |
make_rules | Turn a plain-English policy into a jailbreak-proof guardrail. Write rules the way you would explain them to a colleague — ICME compiles them into formal logic (SMT-LIB) that a mathematical solver enforces. No prompt engineering. No LLM judges. The solver either proves an action complies or it doesn't. Returns a policy_id and test scenarios for review. Costs 300 credits. Requires api_key. |
poll_session | Check the status of a Stripe card payment. Returns pending or complete. On completion after signup, returns the api_key. Call this after create_account_card or top_up_card once the user has paid. |
quick_check | Fast yes/no guardrail verdict — returns only ALLOWED or BLOCKED with no proof details. Use when you need a lightweight gate and don't need the full SAT/UNSAT report or ZK proof. Same formal verification under the hood, just a minimal response. 1 credit. Requires api_key. |
run_tests | Run saved test cases against a policy to confirm it blocks what it should block and allows what it should allow. Run this after make_rules and before using the policy in production. Requires api_key. |
top_up | Add 500 credits to your account via x402 USDC payment ($5.00 on Base). Use top_up_card instead for credit card payment with volume discounts. Requires api_key. |
top_up_card | Add credits via credit card with volume bonuses. Returns a checkout_url. Tiers: $5 = 500 credits, $10 = 1,050 (+5%), $25 = 2,750 (+10%), $50 = 5,750 (+15%), $100 = 12,000 (+20%). Credits never expire. Requires api_key. |
verify_proof | Independently verify a ZK proof from a prior check_action call. Confirms the guardrail check was performed correctly without re-running it — any third party or monitoring agent can verify in under one second. No additional cost. Wait a few minutes after the check for the proof to be generated. Single-use per proof. |
Schemas: list_tools.
{
"name": "io.github.wyattbenno777/icme-preflight",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.icme.io/mcp",
"type": "streamable-http"
}
],
"version": "1.0.1",
"repository": {
"url": "https://github.com/ICME-Lab/smt-ar-base",
"source": "github"
},
"description": "Jailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included."
}