English Français العربية

io.github.mdfifty50-boop/agent-security

Registre officiel Sécurité

Security scanning and threat detection for AI agents

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package agent-security-mcp
Claude Code 
claude mcp add agent-security -- npx -y agent-security-mcp@0.1.3
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "agent-security": {
            "command": "npx",
            "args": [
                "-y",
                "agent-security-mcp@0.1.3"
            ]
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Agent Security MCP Server
  2. Tools
  3. Resources
  4. Installation
  5. Usage
  6. Detection Coverage
  7. Pricing
  8. Requirements
  9. License

Agent Security MCP Server

Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows. Built on the Model Context Protocol (MCP).

Tools

ToolDescription
scan_mcp_configScan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs)
detect_prompt_injectionAnalyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring
validate_scope_contractCheck if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints)
scan_secretsDetect leaked API keys, tokens, private keys, database URIs, and credentials in text or code
audit_agent_permissionsAudit agent configurations against role-based expectations and flag principle of least privilege violations
generate_security_reportGenerate comprehensive security assessment reports with prioritized remediation plans
detect_tool_poisoningAnalyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10)

Resources

ResourceURIDescription
OWASP LLM Top 10security://owasp-llm-top10OWASP Top 10 for LLM Applications (2025)
MCP Security Checklistsecurity://mcp-security-checklistSecurity checklist for MCP server deployments

Installation

cd agent-security-mcp
npm install

Usage

As a standalone server
npm start
In Claude Desktop / MCP client configuration
{
  "mcpServers": {
    "agent-security": {
      "command": "node",
      "args": ["/path/to/agent-security-mcp/src/index.js"]
    }
  }
}
With npx (after publishing)
{
  "mcpServers": {
    "agent-security": {
      "command": "npx",
      "args": ["@asl-throne/agent-security-mcp"]
    }
  }
}

Detection Coverage

Prompt Injection (7 categories, 20+ patterns)
  • Instruction Override -- "ignore previous instructions", "disregard all rules", "new instructions:"
  • Identity Manipulation -- "you are now", "pretend you are", "act as", DAN/jailbreak
  • System Prompt Extraction -- "repeat your system prompt", "show your instructions"
  • Data Exfiltration -- "send this to", "post to webhook", "email everything to"
  • Delimiter Attacks -- \\\`system, [INST], <|im_start|>system, XML tag injection
  • Encoded Injection -- Base64 payloads, unicode zero-width characters, hex escapes
  • Privilege Escalation -- "sudo mode", "disable safety", "bypass filters"
Secret Detection (25+ patterns)
  • AI Provider Keys -- OpenAI (sk-), Anthropic (sk-ant-)
  • Cloud Credentials -- AWS (AKIA*), GCP (AIza*), Azure connection strings
  • Source Control -- GitHub PATs (ghp_*, github_pat_*), OAuth tokens (gho_*)
  • Payment -- Stripe live/test keys (sk_live_*, sk_test_*)
  • Communication -- Slack tokens/webhooks, Telegram bot tokens
  • Database -- PostgreSQL, MongoDB, MySQL, Redis connection URIs
  • Cryptographic -- RSA/EC/OpenSSH private keys, generic PEM blocks
  • JWT -- JSON Web Tokens
  • Generic -- api_key=, secret=, password=, .env file patterns
Permission Audit (6 role profiles)
  • Researcher -- Read + search + web only
  • Analyst -- Read + search only
  • Developer -- Read + write + execute
  • Reviewer -- Read only, no network
  • Orchestrator -- Read + write + task spawning
  • Monitor -- Read only, no network, no write

Pricing

PlanPriceServersFeatures
Free$01 serverSingle scan, basic report
Starter$49/month3 serversContinuous scanning, weekly reports
Pro$199/month20 serversReal-time alerts, CI/CD integration, Slack notifications
Enterprise$799/monthUnlimitedCustom policies, EU AI Act compliance reporting, SSO, dedicated support

Requirements

  • Node.js >= 18.0.0
  • @modelcontextprotocol/sdk >= 1.12.0

License

MIT

Questions fréquentes

Qu'est-ce que io.github.mdfifty50-boop/agent-security ?

Security scanning and threat detection for AI agents

Comment installer io.github.mdfifty50-boop/agent-security ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add agent-security -- npx -y agent-security-mcp@0.1.3. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour io.github.mdfifty50-boop/agent-security ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

io.github.mdfifty50-boop/agent-security est-il open source ?

Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.

Qui maintient io.github.mdfifty50-boop/agent-security ?

Il est publié par mdfifty50-boop. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.