Connection check
local install
agentscore
MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.
Tools
8
GitHub stars
—
Installs / wk
121
Licence
—
Transport
stdio
Last checked
never
Tools & capabilities
8 toolsRead from the published package source — this server runs locally, so there is no endpoint to query. Names are taken from the code, not observed at runtime, and descriptions are often absent.
check_abuse
from source
Check if a package or agent has been reported to the KYA abuse database. Returns whether abuse has been reported and any details. Check if a package or agent has been reported to the KYA abuse database. Returns whether abuse has been reported and any details.
check_exposure
from source
Check which monitored MCP servers depend on a given package. Use this during incident response to find blast radius. Example: Check which monitored MCP servers depend on a given package. Use this during incident response to find blast radius. Example:
check_my_repo
from source
Inspect the current repo for MCP dependencies, look up AgentScore verdicts for each package, and summarise what should be gated in CI. Use this when a developer wants to understand… Inspect the current repo for MCP dependencies, look up AgentScore verdicts for each package, and summarise what should be gated in CI. Use this when a developer wants to understand all MCP packages in a repo instead of scanning one package at a time.
generate_policy_gate_setup
from source
Generate the exact GitHub Actions workflow needed to enforce AgentScore Policy Gate for a repo. Detects MCP dependencies locally and returns the OIDC-based YAML needed for setup. N… Generate the exact GitHub Actions workflow needed to enforce AgentScore Policy Gate for a repo. Detects MCP dependencies locally and returns the OIDC-based YAML needed for setup. No API key or secret is required.
get_verdict
from source
Get a trust verdict for an MCP package: allow, warn, or block. Based on scan findings (score and severity). Also reports monitoring status and publisher posture. Use this before in… Get a trust verdict for an MCP package: allow, warn, or block. Based on scan findings (score and severity). Also reports monitoring status and publisher posture. Use this before installing or connecting to an MCP server.
install_policy_gate
from source
Write the AgentScore Policy Gate workflow file to this repo. Creates .github/workflows/agentscore-policy-gate.yml with OIDC authentication (no API key needed). Detects MCP dependen… Write the AgentScore Policy Gate workflow file to this repo. Creates .github/workflows/agentscore-policy-gate.yml with OIDC authentication (no API key needed). Detects MCP dependencies and includes them in the workflow. The gate will auto-provision the repo on first push.
monitor_status
from source
Check if an MCP package is under continuous monitoring and get its scan history. Shows current score, risk level, and recent changes. Check if an MCP package is under continuous monitoring and get its scan history. Shows current score, risk level, and recent changes.
scan_package
from source