/**
 * Tool Response Scanner
 *
 * Lightweight defence scanner for MCP tool outputs (read-path).
 * Runs injection detection + credential leak scanning (2 of 6 layers).
 * Skips fragmentation, sensitivity, and trust scoring (write-path concerns).
 *
 * Advisory by default: logs threats but never blocks tool responses.
 */
import type { ToolResponseScanResult } from './types.js';
/**
 * Check if a tool's response should be scanned.
 * Unknown tools (e.g. external MCP servers) default to scanned.
 */
export declare function shouldScanToolResponse(toolName: string): boolean;
/**
 * Scan a tool response for threats.
 *
 * Runs injection scanning (40+ patterns) + credential leak detection (25+ providers).
 * In advisory mode, threats are logged but the response is never blocked.
 */
export declare function scanToolResponse(toolName: string, content: string, mode?: 'advisory' | 'enforce'): ToolResponseScanResult;
