Before trust
Supply Chain
Stop risky components before they become trusted dependencies.
Reduce risk across the agent lifecycle
Let teams use AI. Keep security in control.
The Signals Corps platform brings Supply Chain, Runtime Protection, and Hunt under one policy to reduce agent risk before, during, and after agents act.
Protection lifecycle
Security at every point an agent can create risk.
Keep unsafe components out of production, stop high-risk actions before they cause impact, and investigate incidents with the evidence already attached.
-
Pre-release
Before trust
Supply Chain
Stop risky components before they become trusted dependencies.- Skills and instructions
- MCP servers and plugins
- Packages and releases
-
Live execution
While agents act
Runtime Protection
Stop high-risk actions before they execute.- Tool calls and commands
- File and secret access
- Network destinations
-
Investigation
After activity
Hunt
Search AI logs to find suspicious behavior and reconstruct incidents.- Sessions and tool activity
- Policy decisions and approvals
- Cross-agent investigation
Agent ready
Let your agents work with Signals Corps directly.
The Signals Corps MCP server gives AI agents access to everything in the platform, so security work can happen inside the agent your team already uses.
What an agent can do
- Scan a skill, MCP server, or plugin before installing it
- Check whether an action is allowed before running it
- Hunt through sessions, tool calls, and detections in your AI security logs
- Read and manage policy and exceptions
Works with Claude Code and the Claude desktop app, Codex and ChatGPT, Cursor, Windsurf, and any other MCP client.
Can we install deploy-helper 2.4.1 in this repo?
signals-corps · Supply Chain (MCP)
Alertdeploy-helper 2.4.1 matched rules. Install requires administrator approval.
- Critical
ATR-2026-01988Local Sensitive-File Read Chained to Outbound Exfiltration - High
ATR-2026-00583MCP/agent tool reads .env or secret file without user consent
signals-corps · Hunt (MCP)
Loaded in sessions this week. outbound action blocked by policy.
Do not install without approval from an administrator. deploy-helper reads files outside the workspace, and Signals Corps already blocked it sending data out this week.