Native macOS menu bar app that scans MCP servers and AI agent skills for security threats
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"agent-guard": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Native macOS menu bar app that scans your MCP servers and AI agent skills for security threats.
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
An evil MCP server used for redteam testing
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).
MCP Security Weekly
Get CVE alerts and security updates for Agent Guard and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Native macOS menu bar app that scans your MCP servers and AI agent skills for security threats.
brew tap naufalafif/tap
brew install --cask agent-guard
Or build from source:
git clone https://github.com/naufalafif/agent-guard.git
cd agent-guard
make install
Requires macOS 13+. The app auto-installs scanner dependencies on first launch.
| Scanner | What it checks |
|---|---|
| mcp-scanner | MCP server configs — Claude Desktop, Cursor, VS Code, Windsurf, Zed |
| skill-scanner | Agent skill packages — Cursor rules, Claude skills, and other agent instruction files |
Powered by Cisco AI Defense. YARA rules + static analysis. Everything runs locally.
Tip: AgentGuard scans common locations (
~/.cursor/rules,~/.claude/skills,~/.claude/plugins, etc.) by default — including Claude Code marketplace plugins. If you keep skills inside project directories, add your workspace path in Settings.
brew uninstall --cask agent-guard
rm -rf ~/.cache/mcp-scan ~/.config/mcp-scan # optional: remove data
See CONTRIBUTING.md for development setup, architecture, and CI/CD details.
MIT