Agent Security Scanner Mcp
Built for AI coding agents that need security guardrails without slowing down. Exposes 18+ MCP tools including scan_security for vulnerability detection across 12 languages, fix_security for auto-remediation, and check_package to catch hallucinated dependencies against 4.3M+ real packages. The scan_agent_prompt tool blocks prompt injection before your agent acts on untrusted input, while scan_agent_action pre-checks bash commands and file operations. Includes SBOM generation with CycloneDX export, OSV.dev CVE scanning, and LLM-powered semantic code review that understands project intent. Comes in two flavors: a lightweight 81KB pure-regex scanner for speed, or the full version with AST analysis and taint tracking. Integrates with Claude Desktop, Cursor, and OpenClaw for real-time security checks during agentic workflows.
- GitHub stars
- 110
- tools
- 17
- transport
- STDIO
- last updated
- Feb 6, 2026
Tools
17 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_securityCode and repo security.
Code and repo security.
No parameter schema in public metadata yet.
fix_securityCode and repo security.
Code and repo security.
No parameter schema in public metadata yet.
scan_git_diffCode and repo security.
Code and repo security.
No parameter schema in public metadata yet.
scan_projectCode and repo security.
Code and repo security.
No parameter schema in public metadata yet.
scan_mcp_serverMCP and AI skill security.
MCP and AI skill security.
No parameter schema in public metadata yet.
scan_skillMCP and AI skill security.
MCP and AI skill security.
No parameter schema in public metadata yet.
scan_agent_promptPrompt/action safety.
Prompt/action safety.
No parameter schema in public metadata yet.
scan_agent_actionPrompt/action safety.
Prompt/action safety.
No parameter schema in public metadata yet.
check_packagePackage hallucination detection.
Package hallucination detection.
No parameter schema in public metadata yet.
scan_packagesPackage hallucination detection.
Package hallucination detection.
No parameter schema in public metadata yet.
sbom_generateSupply-chain and release evidence.
Supply-chain and release evidence.
No parameter schema in public metadata yet.
sbom_scan_vulnerabilitiesSupply-chain and release evidence.
Supply-chain and release evidence.
No parameter schema in public metadata yet.
sbom_diffSupply-chain and release evidence.
Supply-chain and release evidence.
No parameter schema in public metadata yet.
sbom_export_reportSupply-chain and release evidence.
Supply-chain and release evidence.
No parameter schema in public metadata yet.
get_compliance_controlsSOC2/GDPR/AIUC-1 technical evidence.
SOC2/GDPR/AIUC-1 technical evidence.
No parameter schema in public metadata yet.
evaluate_complianceSOC2/GDPR/AIUC-1 technical evidence.
SOC2/GDPR/AIUC-1 technical evidence.
No parameter schema in public metadata yet.
scanner_healthRuntime diagnostics.
Runtime diagnostics.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
agent-security-scanner-mcp
Security scanner for AI coding agents, MCP servers, prompts, and AI-suggested packages.
Run it before Claude Code, Cursor, Windsurf, Cline, OpenCode, or another agent trusts new code, tools, prompts, or dependencies.
Copy-Paste Start
Scan any repo and get an A-F agent security grade:
npx agent-security-scanner-mcp scan-project . --verbosity compact
Install the scanner into your AI coding client:
npx agent-security-scanner-mcp init claude-code
Details
- Repository
- github.com/sinewaveai/agent-security-scanner-mcp
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
agent-security-scanner-mcp- Transport
- STDIO
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
Awesome Agent Skillsshadowrootdev/awesome-agent-skills-mcpMCP server with 100+ AI agent skills from Anthropic, Vercel, Trail of Bits, Hugging Face & more.23stars
Agent Knowledgekeshrath/agent-knowledgeCross-session memory for AI agents - knowledge graph, scoring, semantic search19stars
Neurodivergent Memoryjmeyer1980/neurodivergent-memoryPersistent knowledge graph MCP server for neurodivergent thinking. BM25 search, no cloud LLM.12stars
LLM CLI Gatewayverivus-oss/llm-cli-gatewayOne MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.8stars
Meta Prompt Mcpkapillamba4/meta-prompt-mcpMCP server providing official Google and Anthropic prompting guides for meta-prompt generation.2stars
Gemini Researchercapybearista/gemini-researcherStateless MCP server that proxies research queries to Gemini CLI, reducing agent context/model usage0stars