Agent Security Scanner
AI agent security scanner and npm audit for MCP servers, Claude Code, Cursor, and Windsurf. Find prompt injection, hallucinated packages, secrets, unsafe tools, and vulnerable code.
Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code (installable)
installable: each client documents how to load an MCP server of this type — that is the client's promise, not a claim verified against this capability
Category: Security — see all ranked ›
Install (Claude Code):
claude mcp add agent-security-scanner -- npx -y agent-security-scanner-mcp- tashan score: 69.0
- Adoption: 1.5k/wk
- Upkeep: 73.0
- Freshness: 99.0
- Evidence coverage: 100% of the inputs this score can use
- Health: active
Security audit
Not scanned yet. We audit npm-published capabilities for known advisories, install-time scripts and permission surface; this one has no npm package we can resolve, or has not reached the queue.
npm ↗ · source ↗ · pkg:agent-security-scanner-mcp
Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›
Measured 2026-08-08 · scorer s5 · how · something wrong here?