agent-security-scanner-mcp MCP Server
sinewaveai/agent-security-scanner-mcp
[](https://agentrank-ai.com/tool/sinewaveai--agent-security-scanner-mcp/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
sinewaveai/agent-security-scanner-mcp is a JavaScript MCP server licensed under MIT. Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix. Topics: ai-security, claude-code, cursor, hallucination-detection, mcp, mcp-server, prompt-injection, sast, security, vulnerability-scanner, agent-security, codex, llm-security, openclaw, owasp, supply-chain-security, windsurf, ai-agent-security, mcp-security, package-hallucination.
Ranked #4606 out of 24846 indexed tools.
Actively maintained with commits in the last week.
Ecosystem
Score Breakdown
123 stars → growing community
Last commit 7d ago → actively maintained
7/35 issues closed → many open issues
8 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/sinewaveai--agent-security-scanner-mcp/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/sinewaveai--agent-security-scanner-mcp/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/sinewaveai--agent-security-scanner-mcp" alt="AgentRank"></a> Matched Queries
From the README
<div align="center"> # agent-security-scanner-mcp **Security scanner for AI coding agents, MCP servers, prompts, and AI-suggested packages.** Run it before Claude Code, Cursor, Windsurf, Cline, OpenCode, or another agent trusts new code, tools, prompts, or dependencies. </div> ## Copy-Paste Start Scan any repo and get an A-F agent security grade: ```bash npx agent-security-scanner-mcp scan-project . --verbosity compact ``` Install the scanner into your AI coding client: ```bash npx agent-security-scanner-mcp init claude-code ``` Replace `claude-code` with `cursor`, `claude-desktop`, `windsurf`, `cline`, `kilo-code`, `opencode`, or `cody`. Audit an MCP server before adding it to an agent: ```bash npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact ``` Check AI-generated imports for package hallucinations: ```bash npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact ``` ## What It Catches | Risk | Why agents need iRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.