What can you do with this server?

This MCP server provides a comprehensive security scanning and compliance toolkit for AI agents, codebases, MCP servers, and dependencies. Here's what it can do: Static Code Analysis * scan_security — Scan files for vulnerabilities (SQL injection, XSS, command injection, etc.) using AST, taint, and semantic engines across 12 languages and 1,700+ rules, with SARIF output * fix_security — Auto-generate fixes for detected vulnerabilities using 120 fix templates * scan_git_diff — Scan only changed files for fast feedback in PRs or pre-commit hooks * scan_project — Audit entire directories with A-F security grading, .gitignore support, and cross-file taint analysis * list_security_rules — Browse all available security rules and fix templates AI Agent-Specific Security * scan_agent_prompt — Detect prompt injection, jailbreaks, data exfiltration attempts, and social engineering (returns BLOCK/WARN/LOG/ALLOW) using 59+ rules * scan_agent_action — Pre-execution safety check for agent actions: bash commands, file operations, HTTP requests, cron jobs, git, Docker, and more Package Hallucination Detection * check_package — Verify a single package exists in official registries (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, raku.land) * scan_packages — Bulk-check all imports in a code file against 4.3M+ known packages * list_package_stats — View statistics about loaded package registry data MCP Server Security * scan_mcp_server — Audit MCP server source code for unicode poisoning, tool name spoofing, description injection, and rug pull attacks; returns an A-F grade OpenClaw Skill Security * scan_skill — 6-layer deep scan of OpenClaw skills: prompt injection, AST+taint analysis, malware signatures (reverse shells, crypto miners, C2 beacons), supply chain verification, and rug pull detection SBOM & Supply Chain Analysis * sbom_generate — Generate CycloneDX v1.5 SBOMs from lock files and manifests across npm, Python, Go, Rust, Ruby, and Java * sbom_scan_vulnerabilities — Cross-reference SBOM against OSV.dev for CVEs with CVSS scores and fix recommendations * sbom_check_hallucinations — Verify all SBOM packages exist in official registries * sbom_diff — Compare current SBOM against a saved baseline to detect dependency drift * sbom_export_report — Generate HTML or JSON audit reports for compliance documentation Compliance Evaluation * get_compliance_controls — Look up controls for AIUC-1, SOC2-Technical, and GDPR-Technical frameworks * evaluate_compliance — Automatically collect evidence and evaluate a project against compliance frameworks with optional timestamped audit trail persistence Scoring & Diagnostics * score_aivss — Score findings using OWASP AIVSS v2 with per-finding scores (0–10) and aggregate security posture * scanner_health / clawproof_health — Check engine status, daemon health, and package data availability

Which integrations are available for this server?

Generates SARIF output compatible with GitHub Code Scanning alerts for vulnerability reporting. Provides LLM-powered semantic code review using OpenAI's models for intent profiling and security analysis.

How do I use agent-security-scanner-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@agent-security-scanner-mcp scan this repository for vulnerabilities" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

agent-security-scanner-mcp

by sinewaveai

Overview Schema Related Servers Score Discussions

JavaScript

Local

This MCP server provides a comprehensive security scanning and compliance toolkit for AI agents, codebases, MCP servers, and dependencies. Here's what it can do:

Static Code Analysis

scan_security — Scan files for vulnerabilities (SQL injection, XSS, command injection, etc.) using AST, taint, and semantic engines across 12 languages and 1,700+ rules, with SARIF output
fix_security — Auto-generate fixes for detected vulnerabilities using 120 fix templates
scan_git_diff — Scan only changed files for fast feedback in PRs or pre-commit hooks
scan_project — Audit entire directories with A-F security grading, .gitignore support, and cross-file taint analysis
list_security_rules — Browse all available security rules and fix templates

AI Agent-Specific Security

scan_agent_prompt — Detect prompt injection, jailbreaks, data exfiltration attempts, and social engineering (returns BLOCK/WARN/LOG/ALLOW) using 59+ rules
scan_agent_action — Pre-execution safety check for agent actions: bash commands, file operations, HTTP requests, cron jobs, git, Docker, and more

Package Hallucination Detection

check_package — Verify a single package exists in official registries (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, raku.land)
scan_packages — Bulk-check all imports in a code file against 4.3M+ known packages
list_package_stats — View statistics about loaded package registry data

MCP Server Security

scan_mcp_server — Audit MCP server source code for unicode poisoning, tool name spoofing, description injection, and rug pull attacks; returns an A-F grade

OpenClaw Skill Security

scan_skill — 6-layer deep scan of OpenClaw skills: prompt injection, AST+taint analysis, malware signatures (reverse shells, crypto miners, C2 beacons), supply chain verification, and rug pull detection

SBOM & Supply Chain Analysis

sbom_generate — Generate CycloneDX v1.5 SBOMs from lock files and manifests across npm, Python, Go, Rust, Ruby, and Java
sbom_scan_vulnerabilities — Cross-reference SBOM against OSV.dev for CVEs with CVSS scores and fix recommendations
sbom_check_hallucinations — Verify all SBOM packages exist in official registries
sbom_diff — Compare current SBOM against a saved baseline to detect dependency drift
sbom_export_report — Generate HTML or JSON audit reports for compliance documentation

Compliance Evaluation

get_compliance_controls — Look up controls for AIUC-1, SOC2-Technical, and GDPR-Technical frameworks
evaluate_compliance — Automatically collect evidence and evaluate a project against compliance frameworks with optional timestamped audit trail persistence

Scoring & Diagnostics

score_aivss — Score findings using OWASP AIVSS v2 with per-finding scores (0–10) and aggregate security posture
scanner_health / clawproof_health — Check engine status, daemon health, and package data availability

agent-security-scanner-mcp

Security scanner for AI coding agents, MCP servers, prompts, and AI-suggested packages.

Run it before Claude Code, Cursor, Windsurf, Cline, OpenCode, or another agent trusts new code, tools, prompts, or dependencies.

npm downloads npm version License: MIT

Copy-Paste Start

Scan any repo and get an A-F agent security grade:

npx agent-security-scanner-mcp scan-project . --verbosity compact

Install the scanner into your AI coding client:

npx agent-security-scanner-mcp init claude-code

Replace claude-code with cursor, claude-desktop, windsurf, cline, kilo-code, opencode, or cody.

Audit an MCP server before adding it to an agent:

npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact

Check AI-generated imports for package hallucinations:

npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact

Related MCP server: AgentAudit

What It Catches

Risk	Why agents need it	Command
Vulnerable generated code	Agents can introduce SQL injection, XSS, command injection, unsafe crypto, and secrets	`scan-project`, `scan-security`, `scan-diff`
MCP server attacks	MCP tools can poison descriptions, spoof names, exfiltrate env vars, or execute commands	`scan-mcp`
Prompt injection	Agents often process untrusted docs, tickets, pages, and tool output	`scan-prompt`
Unsafe agent actions	Catch dangerous shell/file/network actions before execution	`scan-action`
Hallucinated packages	AI often invents dependency names that attackers can later squat	`check-package`, `scan-packages`
SBOM and CVEs	Generate CycloneDX SBOMs and scan dependencies with OSV.dev	`sbom-generate`, `sbom-vulnerabilities`
Semantic review	LLM-powered review that uses project intent to find context-aware issues	`cr-agent`

Screenshots

Project Scan

Project scan demo

MCP Server Audit

MCP audit demo

Package Hallucination Detection

Package hallucination demo

Demos

Run a safe local demo that creates intentionally vulnerable fixtures, scans them, and cleans them up.

# MCP audit demo: tool poisoning, spoofed tool name, command execution, secret exposure
npx agent-security-scanner-mcp demo --type mcp --no-prompt

# Package hallucination demo: real imports mixed with fake AI-generated package names
npx agent-security-scanner-mcp demo --type packages --no-prompt

Expected demo shape:

{
  "grade": "F",
  "findings_count": 8,
  "findings": [
    {
      "rule": "mcp.description-injection",
      "severity": "ERROR",
      "message": "Tool description contains imperative language directed at the LLM."
    },
    {
      "rule": "mcp.tool-name-spoofing",
      "severity": "ERROR",
      "message": "Tool name is close to a well-known MCP tool name."
    }
  ]
}

Install In Your Agent

npx agent-security-scanner-mcp init claude-code

Client	Setup
Claude Code	`npx agent-security-scanner-mcp init claude-code`
Cursor	`npx agent-security-scanner-mcp init cursor`
Claude Desktop	`npx agent-security-scanner-mcp init claude-desktop`
Windsurf	`npx agent-security-scanner-mcp init windsurf`
Cline	`npx agent-security-scanner-mcp init cline`
Kilo Code	`npx agent-security-scanner-mcp init kilo-code`
OpenCode	`npx agent-security-scanner-mcp init opencode`
Cody	`npx agent-security-scanner-mcp init cody`
Interactive picker	`npx agent-security-scanner-mcp init`

Then restart the client. Your agent can call the scanner as an MCP tool.

Agent Playbook

Paste this into an agent task when you want it to work safely:

Before trusting new code, dependencies, prompts, or MCP tools, run:

1. npx agent-security-scanner-mcp scan-project . --verbosity compact
2. npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact when imports change
3. npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact before adding MCP servers
4. npx agent-security-scanner-mcp scan-diff --base main --target HEAD before opening a PR

Fix high-confidence security findings before continuing.

Common Workflows

Before You Trust An Agent-Written PR

npx agent-security-scanner-mcp scan-diff --base main --target HEAD --verbosity compact
npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact

Before Installing An MCP Server

npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact

Before Adding A Dependency Suggested By AI

npx agent-security-scanner-mcp check-package express npm
npx agent-security-scanner-mcp scan-packages ./package.json npm --verbosity compact

Add CI

npx agent-security-scanner-mcp init-ci github

npx agent-security-scanner-mcp scan-project . --verbosity compact > scan-result.json
npx agent-security-scanner-mcp share-kit --scan-result scan-result.json --output share-kit.md

CLI Reference

Command	Use
`scan-project <dir>`	Full project scan with A-F grade
`scan-security <file>`	Single-file security scan
`scan-diff --base main --target HEAD`	Scan changed files only
`scan-mcp <path>`	Audit an MCP server before install
`scan-prompt "<text>"`	Detect prompt injection and jailbreak attempts
`scan-action <type> <value>`	Pre-execution safety check for shell/file/network actions
`check-package <name> <ecosystem>`	Verify one package exists
`scan-packages <file> <ecosystem>`	Verify imports/dependencies in a file
`doctor`	Check local setup health
`quickstart --client cursor`	Generate repo-specific next steps
`share-kit`	Generate public-safe launch/share copy
`export-vanta`	Export scan evidence to the ProofLayer Vanta integration

All scanner outputs support context-friendly verbosity:

--verbosity minimal   # counts only, best for CI
--verbosity compact   # default, best for agents and humans
--verbosity full      # audit/debug detail

MCP Tools For Agents

When installed as an MCP server, agents get these tool families:

Tool family	Purpose
`scan_security`, `fix_security`, `scan_git_diff`, `scan_project`	Code and repo security
`scan_mcp_server`, `scan_skill`	MCP and AI skill security
`scan_agent_prompt`, `scan_agent_action`	Prompt/action safety
`check_package`, `scan_packages`	Package hallucination detection
`sbom_generate`, `sbom_scan_vulnerabilities`, `sbom_diff`, `sbom_export_report`	Supply-chain and release evidence
`get_compliance_controls`, `evaluate_compliance`	SOC2/GDPR/AIUC-1 technical evidence
`scanner_health`	Runtime diagnostics

Why Developers Install It

One npx command gives an A-F security grade for AI-written code.
MCP-specific checks catch risks that normal SAST tools miss.
Package hallucination detection checks 4.3M+ package names across npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, and raku.land.
Output is compact by default so coding agents can read it without burning the context window.
Works as a CLI, MCP server, GitHub Action workflow, Apify Actor, and semantic review agent.
MIT licensed.

Semantic Code Review

cr-agent is bundled with the npm package for LLM-powered semantic review. It reads project intent, then looks for code that violates that intent.

npx cr-agent analyze ./path/to/project -p claude-cli --verbose
npx cr-agent analyze ./path/to/project -p openai --format sarif

Use it when rule-based scanning is not enough and the question is, "Does this code make sense for what this project is supposed to do?"

SBOM And Compliance Evidence

npx agent-security-scanner-mcp sbom-generate .
npx agent-security-scanner-mcp sbom-vulnerabilities .
npx agent-security-scanner-mcp sbom-check-hallucinations .
npx agent-security-scanner-mcp evaluate-compliance . --framework soc2-technical

Useful before releases, SOC 2 evidence collection, vendor reviews, and AI-generated dependency changes.

Apify Actor

Run the scanner as an Apify Actor when you want a hosted API or scheduled scans:

{
  "actorId": "folkloric_morale/agent-security-scanner",
  "input": {
    "target": "repository",
    "repoUrl": "https://github.com/your-org/your-agent.git",
    "repositoryScanMode": "quick",
    "includeTestFiles": false,
    "maxRepositoryFiles": 150,
    "severityThreshold": "medium"
  }
}

Latest Release

v4.5.5 reduces Dockerfile scan noise: chmod 755 no longer reports as dangerous, while world-writable and setuid/setgid modes still flag. The latest product loop reports 0.9463 precision and a 0.0530 false-positive rate.

Detailed release history lives in CHANGELOG.md. The older README-embedded changelog is archived at archive/README_CHANGELOG_ARCHIVE.md.

FAQ

Is this only for MCP servers? No. It scans normal repos, diffs, prompts, actions, packages, SBOMs, MCP servers, and AI skills.

Does it send my source code anywhere? Rule-based CLI and MCP scans are local. cr-agent uses the provider you choose for semantic review.

Is it a replacement for npm audit? No. It complements npm audit by catching AI-specific risks: hallucinated packages, prompt injection, MCP tool poisoning, unsafe agent actions, and vulnerable generated code.

What should I run first? Run npx agent-security-scanner-mcp scan-project . --verbosity compact.

License

MIT

Install Server

license - permissive license

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

2dResponse time

5dRelease cycle

24Releases (12mo)

Commit activity

Issues opened vs closed

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

Mund
Security Testing & QA Tools Autonomous Agents
Tyox-all
A
license
-
quality
A
maintenance
MCP security scanner for AI agents - detects prompt injection, secrets, PII, and vets MCP servers before installation
Last updated 2026-07-13
Apache 2.0
AgentAudit
Security Code Analysis Testing & QA Tools
agentaudit-dev
A
license
A
quality
F
maintenance
Security scanner for AI agent packages that enables AI agents to audit MCP servers and packages for vulnerabilities, prompt injection, and supply chain attacks.
Last updated 2026-06-12
5
24
3
AGPL 3.0
AgentAuditofficial
Penetration Testing Security Code Analysis
agentaudit-dev
A
license
-
quality
D
maintenance
Enables AI agents to scan MCP servers and AI packages for vulnerabilities, prompt injection, and supply chain attacks.
Last updated 2026-03-01
24
AGPL 3.0
Zfuzz
Security Code Analysis Penetration Testing
Zfuzz-dev
A
license
-
quality
A
maintenance
Real security scanners for AI coding agents — SAST (441 rules), secret detection (419+ patterns), dependency CVEs (OSV.dev), MCP/skill vetting, MITRE ATT&CK. Open-source, Rust, free
Last updated 2026-06-30
27
Apache 2.0

View all related MCP servers

Related MCP Connectors

Frogeye Security Scanner
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
shadowgate-mcp
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
AgentAegis
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/sinewaveai/agent-security-scanner-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server

agent-security-scanner-mcp

Copy-Paste Start

What It Catches

Screenshots

Project Scan

MCP Server Audit

Package Hallucination Detection

Demos

Install In Your Agent

Agent Playbook

Common Workflows

Before You Trust An Agent-Written PR

Before Installing An MCP Server

Before Adding A Dependency Suggested By AI

Add CI

Generate Share Copy From A Real Scan

CLI Reference

MCP Tools For Agents

Why Developers Install It

Semantic Code Review

SBOM And Compliance Evidence

Apify Actor

Latest Release

FAQ

Links

License

Maintenance

Resources

Looking for Admin?

Tools

Related MCP Servers

Mund

AgentAudit

AgentAuditofficial

Zfuzz

Related MCP Connectors

Latest Blog Posts

MCP directory API