# Patronus Protect

> Patronus Protect (Casdo Labs GmbH) is an on-device AI firewall that detects prompt injection, PII/DLP,
> sensitive documents and agentic tool risk in text, public HTTPS URLs, documents and MCP servers before
> they reach AI agents, RAG pipelines or LLM applications. It ships a REST Scan API, first-party SDK
> clients, a local CLI with agent plugins, a remote OAuth-protected MCP server and a local stdio MCP
> server, and the open-source Patronus Ark scanning core.

Note: This llms.txt was generated by API Evangelist from public artifacts; the provider does not publish its own llms.txt (docs.patronus.studio/llms.txt returns 404).

## API

- [Scan API base](https://control.patronus.studio/api/v1): POST /scan (scan text, public URL, MCP server, or uploaded files), GET /scan/{job_id} (poll a job). Bearer API key.
- [OpenAPI](https://docs.patronus.studio/openapi.json): authoritative contract v1.1.0 (behind a Cloudflare managed challenge).
- [API reference](https://docs.patronus.studio/api-reference/)

## MCP

- Remote MCP server (OAuth): https://control.patronus.studio/api/mcp - scopes scan:read, scan:write; DCR + PKCE S256.
- Local stdio MCP server "patronus-native" (protocol 2025-06-18): `node scripts/patronus.mjs mcp`, bundled in the CLI plugins.
- Tools: patronus_scan, patronus_check_result, patronus_read_redacted.

## SDKs and CLI

- Python: `pip install patronus-api-client`
- TypeScript: `npm install @patronus-protect/api-client`
- Rust: `cargo add patronus-api-client`
- CLI: `curl -fsSL https://github.com/patronus-protect/patronus-security-cli/releases/latest/download/install.sh | sh`
- Open-source scanning core (Patronus Ark): `pip install patronus-ark` / `cargo add patronus-ark`

## Open source

- [patronus-security (Patronus Ark)](https://github.com/patronus-protect/patronus-security)
- [patronus-security-cli](https://github.com/patronus-protect/patronus-security-cli)
- [Ark documentation](https://patronus-protect.github.io/patronus-security/)

## Security

- [security.txt](https://patronus.studio/.well-known/security.txt) - contact team@patronus.studio
- OAuth discovery: https://control.patronus.studio/.well-known/oauth-authorization-server