owasp-agentic-mcp 1.0.6

OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan, prompt injection detection, tool poisoning check, excessive agency, data leakage. Built by MEOK AI Labs.

OWASP Agentic MCP

OWASP Top 10 for AI Agents Security Assessment — Prompt Injection, Tool Poisoning, Data Leakage

Overview

Security assessment tools based on the OWASP Top 10 for AI Agents. Scan agent configurations for prompt injection vulnerabilities, tool poisoning risks, excessive agency, data leakage, and more.

Tools

Tool	Description	Parameters
full_agent_scan	Full OWASP Agentic Top 10 security scan	agent_config, tools, permissions
assess_agentic_security	Assess against specific OWASP Agentic categories	categories, agent_config
check_prompt_injection	Test for prompt injection vulnerabilities	system_prompt, user_input_template
check_tool_poisoning	Check for tool poisoning risks	tool_definitions, input_validation
check_excessive_agency	Assess agency level vs minimum required	allowed_tools, required_tools, permissions

Installation

pip install mcp

Claude Desktop / Cursor / VS Code / Windsurf

{
  "mcpServers": {
    "owasp-agentic": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Usage Examples

Full agent security scan

{
  "agent_config": {
    "system_prompt": "You are a helpful assistant that can access email, calendar, and file system.",
    "allowed_tools": ["send_email", "read_calendar", "write_file"]
  },
  "permissions": ["email:send", "calendar:read", "files:write"]
}

Check prompt injection

{
  "system_prompt": "You are a financial advisor bot",
  "user_input_template": "{user_query} Please provide investment advice."
}

Pricing

• Free: 10 scans/day
• Pro: $99/mo — unlimited scans + detailed reports
• Enterprise: $499/mo — continuous monitoring + custom rules

---

Built by MEOK AI Labs | meok.ai