Agent Security
Security scanning and threat detection for AI agents
Connector by mdfifty50-boop · GitHub account verified by the MCP Registry
Chalk Labs
Need help deploying Agent Security?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/mdfifty50-boop-agent-security
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 7 read · 0 write · 0 delete · 1 not yet classified
- Secrets
- None asked for
- Install scripts
- Not scanned yet
- Runs as
- Node.js package
Tools by what they do 8
Read from the source code; the running server may list different tools.
Read 7 · Look things up without changing anything.
audit_agent_permissionsdetect_prompt_injectiondetect_tool_poisoninghealth_checkscan_mcp_configscan_secretsvalidate_scope_contract
Not yet classified 1 · We could not tell from the name and description.
generate_security_report
Tools (8)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
audit_agent_permissionsAudit an agent configuration for over-privileged access. Compares granted permissions against role-based expectations (researcher, analyst, developer, reviewer, orchestrator, monitor). Flags principle of least privilege violations.
detect_prompt_injectionAnalyze text for prompt injection attempts. Detects instruction overrides, identity manipulation, system prompt extraction, data exfiltration, delimiter attacks, encoded injections, and privilege escalation. Context-aware risk scoring.
detect_tool_poisoningAnalyze an MCP tool definition for poisoning indicators — hidden instructions in descriptions that could manipulate agent behavior. Covers OWASP Agentic Top 10 tool poisoning attack vectors.
generate_security_reportGenerate a comprehensive security assessment report for an agent deployment. Aggregates results from config scans and permission audits into a prioritized remediation plan with OWASP LLM Top 10 compliance notes.
health_checkReturns server health, uptime, version, and usage stats
scan_mcp_configScan an MCP server configuration for security issues including dangerous commands, exposed secrets, network exposure, and container misconfigurations. Returns a risk score (0-100), issues found, and actionable recommendations.
scan_secretsDetect leaked secrets and credentials in text or code. Identifies API keys (OpenAI, AWS, GitHub, GCP, Stripe, Slack, Telegram), JWT tokens, database connection strings, private keys, and .env patterns. All values are masked in output.
validate_scope_contractCheck if an agent action complies with its scope contract. Validates tool usage against allowlists, file access against permitted paths, and boundary constraints (no_network, read_only, no_exec, no_secrets).
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Apr 24, 2026 (6 months ago)
- Last release
- Apr 24, 2026 (6 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.mdfifty50-boop/agent-security- Version
- 0.1.3
- Auth
- No auth
- Packages
- npm agent-security-mcp
- License
- License unknown
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from mdfifty50-boop
- 0.444score
A2A Bridge
mdfifty50-boop
Agent-to-agent communication bridge for multi-agent systems
ConnectorDFreshness: DLocal★ 1Claude Code +5 - 0.428score
Agentic Observability MCP
mdfifty50-boop
Agent tracing, cost tracking, anomaly detection for LLM agents
ConnectorDFreshness: DLocalClaude Code +5 - 0.423score
Gcc Intelligence
mdfifty50-boop
GCC regulatory intelligence, ZATCA e-invoicing, and Arabic NLP for AI agents
ConnectorDFreshness: DLocalClaude Code +5 - 0.423score
Compliance Shield
mdfifty50-boop
ZATCA, UAE CT, EU AI Act regulatory compliance for AI agents
ConnectorDFreshness: DLocalClaude Code +5 - 0.420score
Secure Vault
mdfifty50-boop
Encrypted secrets and credential management for agents
ConnectorDFreshness: DLocalClaude Code +5 - 0.420score
Agent Replay
mdfifty50-boop
Record and replay AI agent execution for debugging
ConnectorDFreshness: DLocalClaude Code +5
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get Agent Security running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
Agent Security MCP server. Agent Mart. https://agentmart.dev/connectors/mdfifty50-boop-agent-security (last updated 2026-10-24)