@agentsid/scanner 0.1.0

package/reports/ui5-mcp-server.json

@@ -0,0 +1,157 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:03:31.448Z",
+  "server": {
+    "name": "UI5",
+    "version": "0.2.9"
+  },
+  "toolCount": 10,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "F",
+      "validation": "F",
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 2,
+    "HIGH": 1,
+    "MEDIUM": 11,
+    "LOW": 3,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 6,
+    "mutation": 2,
+    "destructive": 0,
+    "execution": 2,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "CRITICAL",
+      "tool": "run_ui5_linter",
+      "rule": "dangerous_tool_execution",
+      "detail": "Tool \"run_ui5_linter\" classified as execution — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_ui5_app",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_ui5_app\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_integration_card",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_integration_card\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "CRITICAL",
+      "tool": "run_manifest_validation",
+      "rule": "dangerous_tool_execution",
+      "detail": "Tool \"run_manifest_validation\" classified as execution — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_guidelines",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"get_guidelines\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "get_guidelines",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"get_guidelines\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "run_ui5_linter",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"run_ui5_linter\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_api_reference",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_api_reference\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_project_info",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_project_info\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_ui5_app",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_ui5_app\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_integration_cards_guidelines",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"get_integration_cards_guidelines\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "get_integration_cards_guidelines",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"get_integration_cards_guidelines\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_integration_card",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_integration_card\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "run_manifest_validation",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"run_manifest_validation\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_typescript_conversion_guidelines",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"get_typescript_conversion_guidelines\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "get_typescript_conversion_guidelines",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"get_typescript_conversion_guidelines\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/upstash-context7-mcp.json

@@ -0,0 +1,82 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:53:41.331Z",
+  "server": {
+    "name": "Context7",
+    "version": "2.1.6",
+    "websiteUrl": "https://context7.com",
+    "description": "Context7 provides up-to-date documentation and code examples for libraries and frameworks.",
+    "icons": [
+      {
+        "src": "https://context7.com/context7-icon-green.png",
+        "mimeType": "image/png"
+      }
+    ]
+  },
+  "toolCount": 2,
+  "grade": {
+    "overall": "D",
+    "score": 53,
+    "categories": {
+      "injection": "A",
+      "validation": "B",
+      "auth": "B",
+      "hallucination": "A"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 4,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 1,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "injection",
+      "severity": "MEDIUM",
+      "tool": "resolve-library-id",
+      "rule": "excessive_description_length",
+      "detail": "Tool description is 2006 chars — unusually long, may contain hidden instructions"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "resolve-library-id",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"resolve-library-id\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "query-docs",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"query-docs\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "resolve-library-id + query-docs",
+      "rule": "conflicting_tool_descriptions",
+      "detail": "Tools \"resolve-library-id\" and \"query-docs\" have 63% description overlap. LLM may choose between them unpredictably."
+    }
+  ]
+}

package/reports/vantasdk-vanta-mcp-server.json

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:51:19.297Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/winor30-mcp-server-datadog.json

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:18:13.613Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/wonderwhy-er-desktop-commander.json

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T17:56:33.149Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/xzxzzx-bilibili-mcp.json

@@ -0,0 +1,58 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:44:45.716Z",
+  "server": {
+    "name": "bilibili-mcp-server",
+    "version": "1.0.0"
+  },
+  "toolCount": 2,
+  "grade": {
+    "overall": "C",
+    "score": 69,
+    "categories": {
+      "validation": "B",
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 2,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 2,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_video_info",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_video_info\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_video_comments",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_video_comments\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/src/grader.mjs

@@ -0,0 +1,66 @@
+/**
+ * Security grader — converts scan findings into letter grades.
+ *
+ * Grading methodology:
+ * - Start at 100 points
+ * - CRITICAL findings: -25 points each
+ * - HIGH findings: -15 points each
+ * - MEDIUM findings: -8 points each
+ * - LOW findings: -3 points each
+ * - INFO findings: 0 points (informational only)
+ * - Floor at 0
+ *
+ * Letter grades:
+ * A: 90-100 (excellent security posture)
+ * B: 75-89  (good, minor issues)
+ * C: 60-74  (acceptable, needs improvement)
+ * D: 40-59  (poor, significant risks)
+ * F: 0-39   (failing, critical vulnerabilities)
+ */
+
+const SEVERITY_DEDUCTIONS = {
+  CRITICAL: 25,
+  HIGH: 15,
+  MEDIUM: 8,
+  LOW: 3,
+  INFO: 0,
+};
+
+export function grade(findings) {
+  let score = 100;
+
+  const counts = { CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, INFO: 0 };
+  const categoryScores = {};
+
+  for (const finding of findings) {
+    const sev = finding.severity || "INFO";
+    counts[sev] = (counts[sev] || 0) + 1;
+    score -= SEVERITY_DEDUCTIONS[sev] || 0;
+
+    const cat = finding.category || "other";
+    if (!categoryScores[cat]) categoryScores[cat] = 100;
+    categoryScores[cat] -= SEVERITY_DEDUCTIONS[sev] || 0;
+  }
+
+  score = Math.max(0, score);
+  for (const cat of Object.keys(categoryScores)) {
+    categoryScores[cat] = Math.max(0, categoryScores[cat]);
+  }
+
+  const letter = score >= 90 ? "A" : score >= 75 ? "B" : score >= 60 ? "C" : score >= 40 ? "D" : "F";
+
+  const categoryGrades = {};
+  for (const [cat, s] of Object.entries(categoryScores)) {
+    categoryGrades[cat] = s >= 90 ? "A" : s >= 75 ? "B" : s >= 60 ? "C" : s >= 40 ? "D" : "F";
+  }
+
+  return {
+    score,
+    letter,
+    counts,
+    categoryGrades,
+    totalFindings: findings.length,
+    critical: counts.CRITICAL,
+    high: counts.HIGH,
+  };
+}

package/src/index.mjs

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+
+/**
+ * AgentsID Security Scanner
+ *
+ * The Lighthouse of agent security. Scan any MCP server and get a
+ * security report card with letter grades across auth, permissions,
+ * input validation, injection risks, and output safety.
+ *
+ * Usage:
+ *   npx @agentsid/scanner -- npx @some/mcp-server
+ *   npx @agentsid/scanner --url https://mcp.example.com
+ *   npx @agentsid/scanner --json -- node my-server.mjs
+ *
+ * Examples:
+ *   agentsid-scan -- npx @modelcontextprotocol/server-filesystem ./
+ *   agentsid-scan -- npx @playwright/mcp-server
+ *   agentsid-scan --json -- python -m my_mcp_server > report.json
+ */
+
+import { scanStdio, scanHttp } from "./scanner.mjs";
+
+// ─── Parse Args ───
+
+const args = process.argv.slice(2);
+let url = null;
+let json = false;
+let command = null;
+let env = {};
+
+for (let i = 0; i < args.length; i++) {
+  if (args[i] === "--url" && args[i + 1]) {
+    url = args[++i];
+  } else if (args[i] === "--json") {
+    json = true;
+  } else if (args[i] === "--env" && args[i + 1]) {
+    const [k, v] = args[++i].split("=");
+    env[k] = v;
+  } else if (args[i] === "--help" || args[i] === "-h") {
+    printHelp();
+    process.exit(0);
+  } else if (args[i] === "--") {
+    command = args.slice(i + 1).join(" ");
+    break;
+  } else if (!args[i].startsWith("-")) {
+    command = args.slice(i).join(" ");
+    break;
+  }
+}
+
+// ─── Help ───
+
+function printHelp() {
+  console.log(`
+AgentsID Security Scanner v0.1.0
+The Lighthouse of agent security.
+
+Usage:
+  agentsid-scan -- <command>         Scan a local MCP server (stdio)
+  agentsid-scan --url <url>          Scan a remote MCP server (HTTP)
+  agentsid-scan --json -- <command>  Output JSON report
+
+Options:
+  --url <url>         Remote MCP server URL
+  --json              Output JSON instead of terminal report
+  --env KEY=VALUE     Set environment variable for the server
+  --help, -h          Show this help
+
+Examples:
+  agentsid-scan -- npx @modelcontextprotocol/server-filesystem ./
+  agentsid-scan -- npx @playwright/mcp-server
+  agentsid-scan --url https://mcp.example.com/mcp
+  agentsid-scan --json -- node my-server.mjs > report.json
+
+Learn more: https://agentsid.dev/scanner
+  `);
+}
+
+// ─── Run ───
+
+async function main() {
+  if (!url && !command) {
+    console.error("Error: Provide a command (-- <command>) or URL (--url <url>) to scan.");
+    console.error("Run with --help for usage.\n");
+    process.exit(1);
+  }
+
+  if (!json) {
+    console.error("\n🔍 AgentsID Security Scanner v0.1.0");
+    console.error("   Scanning MCP server...\n");
+  }
+
+  try {
+    let report;
+    if (url) {
+      report = await scanHttp(url, { json, timeout: 30000 });
+    } else {
+      report = await scanStdio(command, { env, json, timeout: 15000 });
+    }
+
+    console.log(report);
+  } catch (err) {
+    console.error(`Scan failed: ${err.message}`);
+    process.exit(1);
+  }
+}
+
+main();