S
snyk/agent-scan
Security scanner for AI agents, MCP servers and agent skills
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
Client config (built from the install command this repo gives)
{
"mcpServers": {
"snyk-agent-scan": {
"command": "uvx",
"args": ["Have"]
}
}
}Parsed from the README we fetched on 2026-11-07; we have not executed it.
command/args come from the install command the repository states. When it is ambiguous, the project README wins.
VS Code (.vscode/mcp.json - the key is servers)
{
"servers": {
"snyk-agent-scan": {
"command": "uvx",
"args": ["Have"]
}
}
}Same server, but VS Code keeps it under <code>servers</code>.
Claude Code (command line)
claude mcp add --transport stdio snyk-agent-scan -- uvx Have
Claude Code does not read a config file; add the server with this command.
Key names differ by client: Clients & CLI
- Source
- collected from the abordage/awesome-mcp list · type: MCP server
- Harvest history
- first seen 2026-11-05 · last seen 2026-11-14 · seen 10× · listed by 10 sources
- Score
- score 1,003 · 10 sources · mcp
- Install
uvx Have
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
uvx Have. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
first catalogued 2026-11-05；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.
Snyk Agent Scan
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
Discover and scan agent components on your machine for prompt injections
and vulnerabilities (including agents, MCP servers, skills).
> Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary.
> Note: CLI output is experimental and subject to change
> Agent Scan v0.5.x (planned for deprecation)
> The raw output of this CLI — including issue codes, field names, severity labels, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or issue codes.
> Agent Scan v0.6 and later
> The raw output of this CLI — including risk indicator names, scores, field names, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or risk names.
> If you are an enterprise customer using Snyk to manage agent security risk at scale, the CLI output may not reflect what is sent to and shown in the Evo platform. The underlying integration, discovery, and risk assessment that powers enterprise deployments is stable and supported — any changes will be communicated in line with standard Snyk product practices. Contact your account team for deployment guidance.
> NEW Read our technical report on the emerging threats of the agent skill eco-system published together with Agent Scan 0.4, which adds support for scanning agent skills.
### Agent Scan v0.5.x output
> [!WARNING]
> Agent Scan v0.5.x uses issue-code output. This CLI line is planned for deprecation.
### Agent Scan v0.6 and later output
Agent Scan helps you discover all your installed agent components (harnesses, MCP servers, and skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language. Ignore analysis on skills by using --no-skills.
## Security Warning
> ⚠️ IMPORTANT: Scanning MCP configurations can execute commands or make outbound network requests.
> To retrieve tool descriptions, Agent Scan starts stdio MCP servers by executing the commands in the config and connects to configured remote MCP server URLs with their configured headers.
> Recommendations:
> - Run scans inside a sandbox (Docker container, VM, or disposable environment) when evaluating untrusted or third-party MCP configs
> - Review the consent prompt carefully during interactive scans; it shows the command or remote URL for each server
> - Use --dangerously-run-mcp-servers only in trusted environments where you've verified all MCP server commands and remote URLs
> Remote MCP requests refuse destinations resolving to link-local addresses or known cloud-metadata endpoints (169.254.0.0/16, fe80::/10, fd00:ec2::254, and 100.100.100.200). Loopback and private addresses remain allowed for local and internal MCP servers. HTTP redirects are not followed. DNS is validated before each request, but resolution again at connection time leaves a DNS-rebinding window.
> By default, Agent Scan requires explicit user consent (y/n) before contacting each discovered MCP server during foreground interactive runs. Background and push-key scans continue to inspect remote servers automatically for fleet coverage, but do not start stdio servers unless --dangerously-run-mcp-servers is set.
and vulnerabilities (including agents, MCP servers, skills).
> Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary.
> Note: CLI output is experimental and subject to change
> Agent Scan v0.5.x (planned for deprecation)
> The raw output of this CLI — including issue codes, field names, severity labels, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or issue codes.
> Agent Scan v0.6 and later
> The raw output of this CLI — including risk indicator names, scores, field names, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or risk names.
> If you are an enterprise customer using Snyk to manage agent security risk at scale, the CLI output may not reflect what is sent to and shown in the Evo platform. The underlying integration, discovery, and risk assessment that powers enterprise deployments is stable and supported — any changes will be communicated in line with standard Snyk product practices. Contact your account team for deployment guidance.
> NEW Read our technical report on the emerging threats of the agent skill eco-system published together with Agent Scan 0.4, which adds support for scanning agent skills.
### Agent Scan v0.5.x output
> [!WARNING]
> Agent Scan v0.5.x uses issue-code output. This CLI line is planned for deprecation.
### Agent Scan v0.6 and later output
Agent Scan helps you discover all your installed agent components (harnesses, MCP servers, and skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language. Ignore analysis on skills by using --no-skills.
## Security Warning
> ⚠️ IMPORTANT: Scanning MCP configurations can execute commands or make outbound network requests.
> To retrieve tool descriptions, Agent Scan starts stdio MCP servers by executing the commands in the config and connects to configured remote MCP server URLs with their configured headers.
> Recommendations:
> - Run scans inside a sandbox (Docker container, VM, or disposable environment) when evaluating untrusted or third-party MCP configs
> - Review the consent prompt carefully during interactive scans; it shows the command or remote URL for each server
> - Use --dangerously-run-mcp-servers only in trusted environments where you've verified all MCP server commands and remote URLs
> Remote MCP requests refuse destinations resolving to link-local addresses or known cloud-metadata endpoints (169.254.0.0/16, fe80::/10, fd00:ec2::254, and 100.100.100.200). Loopback and private addresses remain allowed for local and internal MCP servers. HTTP redirects are not followed. DNS is validated before each request, but resolution again at connection time leaves a DNS-rebinding window.
> By default, Agent Scan requires explicit user consent (y/n) before contacting each discovered MCP server during foreground interactive runs. Background and push-key scans continue to inspect remote servers automatically for fleet coverage, but do not start stdio servers unless --dangerously-run-mcp-servers is set.
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/snyk-agent-scan/)
- Source
- awesome · https://github.com/snyk/agent-scan
- Browse by field
- MCP servers
- Listed by
- 10 independent sources
- added
- today
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.