Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
<div align="center"> <img src="./prooflayer-logo.png" alt="ProofLayer Logo" width="400"/> # agent-security-scanner-mcp **Security scanner for AI coding agents and autonomous assistants** Scans code for vulnerabilities, detects hallucinated packages, blocks prompt injection, and provides LLM-powered semantic code review — via MCP (Claude Code, Cursor, Windsurf, Cline) or CLI (OpenClaw, CI/CD). [](https://www.npmjs.com/package/agent-security-scanner-mcp) [](https://www.npmjs.com/package/agent-security-scanner-mcp) [](https://opensource.org/licenses/MIT) [](benchmarks/RESULTS.md) [](https://github.com/sinewaveai/agent-security-scanner-mcp/actions/workflows/test.yml) </div> --- ## 🎯 Two Versions Available ### 🔥 ProofLayer (Lightweight) - **NEW!** **Ultra-fast, zero-Python security scanner** — 81.5KB package, 4-second install [](https://www.npmjs.com/package/@prooflayer/security-scanner) [](https://www.npmjs.com/package/@prooflayer/security-scanner) ```bash npm install -g @prooflayer/security-scanner ``` - ⚡ **4-second install** (vs 45s traditional scanners) - 📦 **81.5KB package** (vs 50MB+ alternatives) - 🚀 **Instant scans** - pure regex, no Python/LLM - 🛡️ **400+ security rules** across 9 languages - 🎯 **7 MCP tools** for AI agents - ✅ **Zero dependencies** on Python - 💯 **MIT licensed** - free for commercial use [📖 ProofLayer Documentation →](./prooflayer-scanner/) --- ### 🔬 Full Version (Advanced) **En
Agent that generates comprehensive documentation, API references, architecture diagrams, and developer onboarding guides from existing code.
Agent configuration for systematic bug investigation that traces issues from error logs through the codebase to root cause with suggested fixes.
Agent for integrating third-party APIs including SDK setup, type generation, error handling, retry logic, and rate limit management.
Cursor's built-in autonomous coding agent that can make multi-file edits, run terminal commands, search the codebase, and iteratively build features with minimal human intervention.
Cloud-based autonomous coding agent that runs in the background on remote sandboxed environments, handling complex multi-step tasks while you continue working.
Cursor's multi-file editing agent within Composer mode that can create, edit, and delete files across your entire project in a single conversation.