The npm audit + lockfile + CI drift gate for the MCP era. One command against tool poisoning, rug-pulls, credential leaks, and known advisories.
npm i -g agentgate$ agentgate scan --lock agentgate.lock ✔ filesystem-server 12 tools · matches lock ✔ github-server 8 tools · matches lock ⚠ web-fetch-server SSRF vector: unrestricted URL fetch ✖ postmark-mcp@1.0.16 MCPA-2025-0002 · hidden BCC backdoor ✖ notes-server tool description drift from lock 2 critical · 1 warning · exit code 1 Gate closed. Review drift with `agentgate diff`.
Everything fragmented across five point tools today, in a single coherent workflow.
Static + live analysis: tool poisoning, hidden Unicode, credential leaks, SSRF/RCE vectors, over-privileged combos.
Pin the exact tool surface — names, descriptions, schemas — into agentgate.lock. Rug-pulls can’t hide.
CI fails on any drift from the approved baseline. Human-readable diffs, not binary allow/deny.
Cross-check every server against a public, structured MCP advisory database — free API, CLI-integrated.
One global install; auto-discovers Claude, Cursor, VS Code, and Codex MCP configs.
Audit every configured server, then pin the approved tool surface to agentgate.lock.
Add one CI step (or the GitHub Action). Any upstream drift turns the build red.
# 1. install $ npm i -g agentgate # 2. scan and lock $ agentgate scan $ agentgate lock # 3. gate in CI $ agentgate ci --lock agentgate.lock
Structured JSON advisories for known-malicious and vulnerable MCP servers. Free API, automatically cross-checked on every scan.