Agent Scan is a free security scanning tool designed for the MCP (Model Context Protocol) environment. It facilitates the detection of vulnerabilities and prompt injections in various agent components on a machine, such as harnesses, MCP servers, and skills. The tool automatically discovers installed agent configurations and provides a detailed report on potential security risks, including over 15 distinct vulnerabilities related to tool poisoning, untrusted content, and sensitive data handling.

This program operates in two modes: a manual scan mode that allows users to initiate scans and review results interactively, and a background mode that regularly monitors the security status of agent components. Users are warned about the potential risks of executing commands defined in MCP configurations, emphasizing the importance of running scans in a secure environment. Agent Scan is suitable for security teams and individuals looking to maintain the integrity of their agent ecosystems.