MCP servers for agent-security

Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.

🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI

Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.

Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.

The execution safety layer for AI agents.

Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code and any MCP app.

Local credential control for AI coding agents.

Indirect prompt injection sanitizer and delimiter boundary firewall neutralizing embedded command overrides

Adversarial prompt jailbreak detector analyzing framing evasion, hypothetical bypasses, and token smuggling

Adversarial prompt jailbreak detector analyzing framing evasion, hypothetical bypasses, and token smuggling

Egress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads

Indirect prompt injection sanitizer and delimiter boundary firewall neutralizing embedded command overrides

Role-based access control and tool privilege attenuator preventing unauthorized tool invocations

Dynamic honeypot and cryptographic canary token sentinel detecting prompt extraction and triggering session freezes

Role-based access control and tool privilege attenuator preventing unauthorized tool invocations

Egress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads

Dynamic honeypot and cryptographic canary token sentinel detecting prompt extraction and triggering session freezes

Capgate — runtime authority boundary for autonomous AI agents: the agent proposes, the harness authorizes, the executor acts. Deny-by-default policy, non-transitive delegation, tamper-evident audit, M

MCP & Claude Code security scanner — threat-models plugins, MCP servers, hooks, skills & connectors with an LLM before you trust them. Catches prompt injection, tool poisoning & credential exfiltratio

Executable AI agent readiness gate: GitHub Action, prompt injection evals, LangGraph traces, risk profiles, and bilingual EN/中文 docs.

Intent firewall for AI agents — NVIDIA Nemotron checks every tool call against the user's goal and blocks prompt-injection hijacks before they run.

Fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline — trivy for

Put a governance boundary between your agents and every API they can reach. Declared capabilities, risk-tiered execution, human approval, credential brokering and a complete audit trail. MIT.