Claude MarketplacesSubmit

Agentscore

thezenmonster/agentscores

Wraps the AgentScore security API into eight MCP tools for scanning npm packages, making trust decisions, and enforcing policy. You can ask Claude to scan a package for install scripts and prompt injection patterns, get a verdict with a risk score, check which monitored MCP servers depend on a compromised package, or inspect your repo for MCP dependencies. It also generates and installs a GitHub Actions workflow that gates PRs based on dependency posture, provisioned via OIDC. No API key required. Reach for this when you need to vet MCP packages before install or turn ad hoc security checks into a CI gate that blocks risky dependencies.

tools: 8
transport: STDIO
last updated: Nov 12, 2026

Tools

8 tools

Public tool metadata for what this MCP can expose to an agent.

scan_packageFull security scan: install scripts, prompt injection, source code patterns, provenance posture, MCP tool extraction

Full security scan: install scripts, prompt injection, source code patterns, provenance posture, MCP tool extraction

No parameter schema in public metadata yet.

get_verdictTrust decision: allow, warn, or block based on scan findings. Also reports monitoring status and publisher posture.

Trust decision: allow, warn, or block based on scan findings. Also reports monitoring status and publisher posture.

No parameter schema in public metadata yet.

check_my_repoInspect the current repo for MCP dependencies and summarise verdicts for every package detected locally.

Inspect the current repo for MCP dependencies and summarise verdicts for every package detected locally.

No parameter schema in public metadata yet.

generate_policy_gate_setupGenerate the exact OIDC-based GitHub Actions workflow needed to enforce Policy Gate in CI.

Generate the exact OIDC-based GitHub Actions workflow needed to enforce Policy Gate in CI.

No parameter schema in public metadata yet.

install_policy_gateWrite `.github/workflows/agentscore-policy-gate.yml` directly into the repo so the gate is ready to commit.

Write `.github/workflows/agentscore-policy-gate.yml` directly into the repo so the gate is ready to commit.

No parameter schema in public metadata yet.

check_exposureIncident response: which monitored MCP servers depend on a given package?

Incident response: which monitored MCP servers depend on a given package?

No parameter schema in public metadata yet.

check_abuseQuery the KYA abuse database for reported packages or agents

Query the KYA abuse database for reported packages or agents

No parameter schema in public metadata yet.

monitor_statusCheck if a package is under continuous monitoring and get scan history

Check if a package is under continuous monitoring and get scan history

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly

Agent CaffeineSponsoredClose your lid, come back to finished work

SnugSponsoredThe clipboard manager for the AI era Promote your product hereReach 125k+ visitors monthly

WaxSponsoredBlock anything with supervision, without erasing your iPhone Promote your product hereReach 125k+ visitors monthly

knobsSponsoredSee your site on any phone, any day, in any language

Readme

Details

Repository: github.com/thezenmonster/agentscores
Categories: Security & Pentesting, Monitoring & Observability
Package: @agentscore-xyz/mcp-server
Transport: STDIO
Registry: MCP registry, active

More from thezenmonster

agentmem2

Related Security & Pentesting MCP servers

1

Mcp Gatewaycivicteam/civic-mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.0stars

2

SiteVitalstom18a/sitevitals-mcpMonitor website health, uptime, SEO, security and performance via your AI assistant.0stars

3

MCP Marketplacegmoneyn/mcp-marketplaceSearch and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.0stars

4

SkillAuditmegamind-0x/skillauditSecurity scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. F0stars

5

Idig Dnskbhave/mcp-service-idigProfessional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.0stars

6

Nexus Mcpnexus-api-lab/nexus-mcpJapanese LLM security — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free.0stars