Prompt injection detection, secret scanning, permission auditing
Connect Agent Security MCP to Claude, Cursor or any other MCP client and it stops being a tab you switch to. Prompt injection detection, secret scanning, permission auditing. The agent security mcp mcp server is what makes that connection.
Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows. Built on the Model Context Protocol (MCP).
Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.
The toolset is worth reading before you wire it up, because it tells you what the integration is really for:
scan_mcp_config — Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs)detect_prompt_injection — Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoringvalidate_scope_contract — Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints)scan_secrets — Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or codeaudit_agent_permissions — Audit agent configurations against role-based expectations and flag principle of least privilege violationsgenerate_security_report — Generate comprehensive security assessment reports with prioritized remediation plansdetect_tool_poisoning — Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10)Among the database access options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Agent Security MCP's toolset — scan_mcp_config, detect_prompt_injection, validate_scope_contract and 4 more — is a fair guide to whether it matches your workflow. It is maintained by mdfifty50-boop; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| scan_mcp_config | Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs) |
| detect_prompt_injection | Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring |
| validate_scope_contract | Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints) |
| scan_secrets | Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or code |
| audit_agent_permissions | Audit agent configurations against role-based expectations and flag principle of least privilege violations |
| generate_security_report | Generate comprehensive security assessment reports with prioritized remediation plans |
| detect_tool_poisoning | Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10) |
{
"mcpServers": {
"agent-security": {
"command": "node",
"args": ["/path/to/agent-security-mcp/src/index.js"]
}
}
}Configuration as documented by the project. Restart the client after saving.
Read-only SQL access to Postgres — let your assistant inspect schemas and answer questions from real data.
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.
Serverless Postgres with database branching — point your assistant at Neon and let it work on disposable copies.