Koma Gate MCP

Expose Koma Gate's prompt-injection classification as an MCP tool for AI agents.

npm install koma-gate-mcp

What it does

Provides a single tool, classify_input, that an AI agent can call to check whether untrusted user text is safe and in-scope before acting on it.

Setup

Set the provider and API key:

# Provider: openai | anthropic | google | deepseek | ollama (default: google)
export KOMA_PROVIDER=google
export GEMINI_API_KEY=sk-...

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "koma-gate": {
      "command": "npx",
      "args": ["-y", "koma-gate-mcp"]
    }
  }
}

Tool: classify_input

• text (required) — the untrusted user input to classify
• preset (optional) — general | code | support | reference (default: general)

Returns:

{
  "allowed": true,
  "in_scope": true,
  "reason": "in scope",
  "preset": "general",
  "model": "gemini-2.5-flash"
}

Security Boundary

This is an LLM-based scope classifier, not a cryptographic prompt-injection defense. See koma-gate's README for the full security boundary and BENCHMARKS.md for evaluation results.