Habits prompt-injection guard
Deprecated in registry
com.darmousseh/habits-guardVersion 1.0.1Check user prompts for injection/jailbreaks; your own guard learns from your labels. Works keyless.
Status
Responds130 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 13:53 UTC
- Latency
- 130 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://habits.darmousseh.com/mcpResponds130 msNo sign-in
Claude Code
claude mcp add --transport http habits-guard https://habits.darmousseh.com/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: habits-guard
Remote MCP server URL: https://habits.darmousseh.com/mcpCursor
{
"mcpServers": {
"habits-guard": {
"url": "https://habits.darmousseh.com/mcp"
}
}
}VS Code
code --add-mcp '{"name":"habits-guard","type":"http","url":"https://habits.darmousseh.com/mcp"}'Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
3 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
check_promptIs this user-typed text a prompt injection or jailbreak (an attempt to override, hijack or extract an AI system's instructions)? Returns flagged true/false and a 0-1 score. Without a key it uses the public guard (30 checks per day per network). With a key it uses your own guard, which learns from teach_guard; the result carries a request_id. Built for user prompts; it is weak on injections hidden in tool output or documents. | Not declared | Yes | Not declared | No |
get_free_keyCreate a free Habits account and API key (no email). The key is shown once; set it as the Authorization: Bearer header for this MCP server. The free plan has a fixed $0.10/day spend cap and its own trainable injection guard. | Not declared | No | Not declared | Not declared |
teach_guardLabel one prompt for your own guard so it stops repeating a mistake (a false alarm on a normal request, or a missed injection). Needs an API key (get_free_key). About 50 of your own labels cut false alarms from 15% to 4% in our benchmark. | Not declared | No | Yes | Not declared |
Details
- Registry status
- Deprecated
- Published
- Nov 12, 2026
- Updated
- Nov 15, 2026
- Repository
- Not given
- Categories (suggested)
- AI modelsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared