security MCP Server
MCP server providing security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows
Discovered via github-topic:model-context-protocol and last synced 3mo ago.
1. Install the package
npx agent-security-mcp
2. Add to claude_desktop_config.json
{
"mcpServers": {
"agent-security-mcp": {
"command": "npx",
"args": [
"agent-security-mcp"
]
}
}
}Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) / %APPDATA%\Claude\claude_desktop_config.json (Windows)
URI
Description
Servers
Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring
$49/month
Audit agent configurations against role-based expectations and flag principle of least privilege violations
Generate comprehensive security assessment reports with prioritized remediation plans
Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10)
$199/month
Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or code
$0
Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs)
Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints)
$799/month
>system, XML tag injection - **Encoded Injection** -- Base64 payloads, unicode zero-width characters, hex escapes - **Privilege Escalation** -- "sudo mode", "disable safety", "bypass filters" ### Secret Detection (25+ patterns) - **AI Provider Keys** -- OpenAI (sk-*), Anthropic (sk-ant-*) - **Cloud Credentials** -- AWS (AKIA*), GCP (AIza*), Azure connection strings - **Source Control** -- GitHub PATs (ghp_*, github_pat_*), OAuth tokens (gho_*) - **Payment** -- Stripe live/test keys (sk_live_*, sk_test_*) - **Communication** -- Slack tokens/webhooks, Telegram bot tokens - **Database** -- PostgreSQL, MongoDB, MySQL, Redis connection URIs - **Cryptographic** -- RSA/EC/OpenSSH private keys, generic PEM blocks - **JWT** -- JSON Web Tokens - **Generic** -- api_key=, secret=, password=, .env file patterns ### Permission Audit (6 role profiles) - **Researcher** -- Read + search + web only - **Analyst** -- Read + search only - **Developer** -- Read + write + execute - **Reviewer** -- Read only, no network - **Orchestrator** -- Read + write + task spawning - **Monitor** -- Read only, no network, no write ## Pricing
真实性验证技能。分析用户提供的信息、消息、图片或内容，判断其真实性和可信度，识别虚假信息、AI生成内容或伪造内容。
Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
Learn how to use the absolute-audit Claude skill. Complete guide with installation instructions and examples.
Learn how to use the token-scam-analysis Claude skill. Complete guide with installation instructions and examples.
Learn how to use the absolute-upgrade Claude skill. Complete guide with installation instructions and examples.