Security scanner for MCP servers and AI agents. Detects prompt injection in tool descriptions, tool poisoning, rug pulls, supply-chain risk and the lethal trifecta. Pins tool definitions to a lockfile and enforces it at runtime. SARIF + CycloneDX AIBOM. Zero dependencies.
