Prompt injection, poisoned tool descriptions and excessive agency are risks a conventional application scan will not look for. Having them as callable checks means an agent design gets reviewed while it is being assembled rather than after something happens.
A security-assessment server built on the OWASP Top 10 for Agentic AI. It reviews an agent setup against the categories that apply to agents rather than to web applications: prompt injection, tool poisoning, excessive agency and data leakage.
- A full sweep across an agent configuration (full_agent_scan)
- An OWASP-framed assessment of an agentic setup (assess_agentic_security)
- A prompt-injection check (check_prompt_injection)
- A tool-poisoning check over the tool definitions an agent is exposed to (check_tool_poisoning)
- An excessive-agency check on how much the agent is permitted to do unsupervised (check_excessive_agency)
Python and pip install owasp_agentic_mcp, or the Smithery installer. The tools themselves need no key; the vendor's paid Pro and Enterprise plans cover the wider MCP suite and EU AI Act tracking rather than these checks.
One command — pip install owasp_agentic_mcp