From 9b67b9a6cd8f82057a282ffb8ba5ce9f20bc937c Mon Sep 17 00:00:00 2001 From: Syed Anas Mohiuddin <91664161+SyedAnas01@users.noreply.github.com> Date: Wed, 6 May 2026 13:20:34 -0500 Subject: [PATCH] =?UTF-8?q?Add=20mcp-safeguard=20=E2=80=94=20AI=20agent=20?= =?UTF-8?q?security=20scanner?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 4c1cedd..266842f 100644 --- a/README.md +++ b/README.md @@ -168,6 +168,8 @@ Static code review tools working with source code and looking for known patterns | **Bearer** | [https://github.com/Bearer/bearer](https://github.com/Bearer/bearer) | Detect security issues in various languages (JavaScript/TypeScript, Ruby, Java, PHP...) . |![Safety](https://img.shields.io/github/stars/Bearer/bearer?style=for-the-badge) | | **mobsfscan** | [https://github.com/MobSF/mobsfscan](https://github.com/MobSF/mobsfscan) | Detect security issues in Android and iOS source code (Java/Kotlin and Objective C/Swift)|![Safety](https://img.shields.io/github/stars/MobSF/mobsfscan?style=for-the-badge) | +| **mcp-safeguard** | [https://github.com/SyedAnas01/mcp-safeguard](https://github.com/SyedAnas01/mcp-safeguard) | Security scanner for MCP (Model Context Protocol) servers. Detects prompt injection in tool descriptions, hardcoded credentials, exposed endpoints, and tool poisoning in AI agent infrastructure. `pip install mcp-safeguard` |![mcp-safeguard](https://img.shields.io/github/stars/SyedAnas01/mcp-safeguard?style=for-the-badge) | + **Note:** Semgrep is free CLI tool, however some rulesets (https://semgrep.dev/r) are having various licences, some can be free to use and can be commercial. OWASP curated list of SAST tools : https://owasp.org/www-community/Source_Code_Analysis_Tools