How Teams Use Medusa

From individual developers to enterprise security teams — Medusa protects AI agent infrastructure at every scale.

Secure AI Coding Assistants

Cursor, Claude Code, Codex, Windsurf

The Challenge

Developers use AI coding assistants that have full access to their filesystem, terminal, and git repositories via MCP. A single prompt injection or misconfigured tool call can leak API keys, environment variables, or proprietary source code.

How Medusa Helps

Medusa sits between the AI assistant and every MCP server it calls. It scans tool arguments and server responses in real-time, blocking secrets and PII before they leave the endpoint.

  • Detects API keys, tokens, and credentials with 100% accuracy
  • Scans file writes, reads, and terminal commands transparently
  • Auto-discovers and proxies MCP servers in Claude Desktop, Cursor, Codex, and 9 more clients

Enterprise Fleet Protection

MDM deployment, centralized policy, fleet monitoring

The Challenge

Security teams need to deploy AI agent protections across hundreds of developer workstations without disrupting workflows. Manual configuration doesn't scale, and developers can't be trusted to self-enforce DLP policies.

How Medusa Helps

Deploy the Medusa agent via Jamf, Intune, or SCCM with a single command. Policies are managed centrally from the dashboard and pushed to all agents automatically. Fleet health, MCP server inventory, and DLP detections are visible in real-time.

  • Silent MDM deployment via `pipx install medusa-mcp` baked into provisioning images
  • Centralized policy with global, agent-specific, and group scopes
  • Real-time fleet dashboard with agent health, version tracking, and auto-updates

Compliance & Data Loss Prevention

PII, PHI, financial data, legal documents

The Challenge

Regulated industries (healthcare, finance, legal) need to ensure that AI agents don't accidentally process or transmit protected data through MCP tool calls. A single PHI leak through a file write can trigger a HIPAA violation.

How Medusa Helps

the Medusa Model detects 10 categories of sensitive data — including PII, PHI, financial data, and legal documents — inside text, PDFs, Excel files, and Word documents. All scanning happens on-device, so protected data never leaves the endpoint.

  • 10 DLP categories: secrets, PII, financial, health, injection, code, legal, HR, insurance, business
  • File content scanning: extracts and scans text from PDF, XLSX, DOCX files
  • Full audit trail with timestamps, confidence scores, and policy verdicts

Prompt Injection Defense

Block malicious MCP server responses

The Challenge

MCP servers can return malicious instructions that hijack the AI agent's behavior — instructing it to exfiltrate data, execute commands, or bypass safety controls. This is the 'tool poisoning' attack vector unique to agentic AI.

How Medusa Helps

Medusa scans server responses for known injection patterns and blocks them before the AI agent processes the response. Configurable actions: block the response entirely, redact the injection, or coach the agent with a warning.

  • 100% detection rate on prompt injection patterns
  • Configurable response: block, redact, or coach
  • Covers role hijacking, instruction override, data exfiltration, and jailbreak patterns

See Medusa in action