Agent Audit MCP Server

Security scanner for AI agent tooling — MCP servers, tool definitions, and agentic pipelines

Local serverstdioPython

What is the Agent Audit MCP Server?

Security scanner for AI agent tooling — MCP servers, tool definitions, and agentic pipelines

What you get

Catch prompt injection, command injection, hardcoded secrets, and excessive permissions in your MCP server configurations — before attackers do.

  • 30+ CVEs filed Jan–Feb 2026 — , 43% were command injection
  • Tool poisoning attacks — hide instructions in tool descriptions that hijack LLM behavior
  • Hardcoded secrets — in MCP configs are stored in plaintext at ~/.config/claude/
  • 5 connected MCP servers → 78% attack success rate — (Palo Alto Research, 2026)
  • More capable models are more vulnerable — o1-mini shows 72.8% attack success against poisoned tools (MCPTox benchmark)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Configuration

VariableDescriptionRequired
AWS_ACCESS_KEY_IDCredential the server authenticates with.Yes

Frequently asked questions

Security scanner for AI agent tooling — MCP servers, tool definitions, and agentic pipelines Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.