Agent Security
Built for securing AI agent workflows, this server scans MCP configurations for misconfigurations and exposed secrets, detects prompt injection across seven attack categories (instruction override, identity manipulation, delimiter attacks, encoded payloads), and audits agent permissions against six role profiles like researcher, analyst, and developer. It validates scope contracts to enforce tool allowlists and file access boundaries, scans for 25+ secret patterns including OpenAI keys, AWS credentials, and database URIs, and checks MCP tool definitions for hidden instructions that could manipulate agent behavior. Reach for this when you're hardening production agent systems or need to catch prompt injections and credential leaks before they cause damage.
- tools
- 7
- transport
- STDIO
- last updated
- Apr 24, 2026
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_mcp_configScan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs)
Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs)
No parameter schema in public metadata yet.
detect_prompt_injectionAnalyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring
Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring
No parameter schema in public metadata yet.
validate_scope_contractCheck if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints)
Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints)
No parameter schema in public metadata yet.
scan_secretsDetect leaked API keys, tokens, private keys, database URIs, and credentials in text or code
Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or code
No parameter schema in public metadata yet.
audit_agent_permissionsAudit agent configurations against role-based expectations and flag principle of least privilege violations
Audit agent configurations against role-based expectations and flag principle of least privilege violations
No parameter schema in public metadata yet.
generate_security_reportGenerate comprehensive security assessment reports with prioritized remediation plans
Generate comprehensive security assessment reports with prioritized remediation plans
No parameter schema in public metadata yet.
detect_tool_poisoningAnalyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10)
Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10)
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Agent Security MCP Server
Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows. Built on the Model Context Protocol (MCP).
Tools
| Tool | Description |
|---|---|
scan_mcp_config | Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs) |
detect_prompt_injection | Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring |
validate_scope_contract | Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints) |
scan_secrets | Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or code |
audit_agent_permissions | Audit agent configurations against role-based expectations and flag principle of least privilege violations |
generate_security_report | Generate comprehensive security assessment reports with prioritized remediation plans |
detect_tool_poisoning | Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10) |
Details
- Repository
- github.com/mdfifty50-boop/agent-security-mcp
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
agent-security-mcp- Transport
- STDIO
- Registry
- MCP registry, active
More from mdfifty50-boop
Related AI & LLM Tools MCP servers
View all
Gemini Code Context Mcpqmediat/gemini-code-context-mcpCodebase Q&A for Claude Code through Gemini's 1M-token window, with workspace scans and caching.0stars
Sequential Thinking Working Notesarben-adm/mcp-sequential-thinkingLocal working notes, decisions, evidence and resumable sessions with SQLite persistence.960stars
Shodh Memoryvarun29ankus/shodh-memoryCognitive memory for AI agents — semantic search, Hebbian learning, knowledge graphs.217stars
Gemini Cloud Assist Mcpgooglecloudplatform/gemini-cloud-assist-mcpMCP Server for understanding, managing & troubleshooting your GCP environment.63stars
Geminihoutini-ai/gemini-mcpModel Context Protocol server for Google Gemini AI with chat, research, and grounding34stars
Neverinfamous Memory Journal Mcpneverinfamous/memory-journal-mcpA MCP server built for developers enabling Git based project management with project and personal…17stars