Screen
Screen an MCP tool.
Paste a tool description. An LLM judge reads it for hidden instructions - the kind that tell an agent to read a secret file, exfiltrate data, or follow a buried command - and flags the exact line.
Building an MCP server? Run yours through it and see the verdict your users would see before their agent calls your tool. Same screen, same output, whether you own the tool or are deciding whether to trust it.
POST /api/v1/screenlive · advisory · semantic-only
Sent to an LLM judge for screening. Avoid pasting real secrets.
try
What this is - and isn't
- Advisory and semantic-only. We read the description, not the running tool. The deterministic conformance probe is in build; until it ships, findings are labeled PARTIAL.
- A pass is not a safety guarantee.It means the description isn't lying - not that the tool is safe to grant access to. A high-capability tool with an honest description still warrants caution.
- Not a certification or a badge. Screening your own tool does not get it endorsed, listed, or ranked higher. We publish what the judge finds, including DENY, and the verdict is the same one a user evaluating your tool would get. We screen tools; we don't sell them a verdict.
- Your input isn't storedunless you check “Contribute this example.” See privacy and how a finding is produced.