Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"agentseal": {
"args": [
"-y",
"@modelcontextprotocol/server-filesystem"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
pip install agentseal # or: npm install agentseal agentseal guard # scan your machine - no API key needed
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked agentseal against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security / ai-ml
Persistent memory using a knowledge graph
Dynamic problem-solving through sequential thought chains
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.
MCP Security Weekly
Get CVE alerts and security updates for Agentseal and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Docs · MCP Registry · Dashboard · Blog
pip install agentseal # or: npm install agentseal
agentseal guard # scan your machine - no API key needed
That's it. AgentSeal finds dangerous skill files, poisoned MCP server configs, and data exfiltration paths across every AI agent on your machine.
Want to test a system prompt against adversarial attacks?
agentseal scan --prompt "You are a helpful assistant..." --model ollama/llama3.1:8b # free, local
agentseal scan --prompt "You are a helpful assistant..." --model gpt-4o # cloud
| Command | What it does | Needs an LLM? |
|---|---|---|
guard | Scans skill files, MCP configs, toxic data flows, and supply chain changes on your machine | No |
scan | Tests a system prompt against 225+ adversarial attack probes | Yes* |
scan-mcp | Connects to a live MCP server and audits its tool descriptions for poisoning | No |
shield | Watches agent config files in real time, alerts on threats, quarantines payloads | No |
*Free with Ollama. Cloud providers (OpenAI, Anthropic, etc.) require an API key.
Scans all AI agent configurations on your machine. No API key, no network calls - everything runs locally.
Supported agents: Claude Code, Claude Desktop, Cursor, Windsurf, VS Code, Gemini CLI, Codex CLI, Cline, Roo Code, Kilo Code, Copilot CLI, Aider, Continue, Zed, Amp, Amazon Q, Junie, Goose, Kiro, OpenCode, OpenClaw, Crush, Qwen Code, Grok CLI, Visual Studio, Kimi CLI, Trae, MaxClaw.
agentseal guard
Guard runs a six-stage detection pipeline on every file it finds:
agentseal guard init # generate .agentseal.yaml project policy
agentseal guard --output sarif # SARIF for GitHub Security tab
agentseal guard --output json # machine-readable output
agentseal guard --no-diff # skip baseline delta section
agentseal guard test
... [View full README on GitHub](https://github.com/AgentSeal/agentseal#readme)