@inkog-io/mcp 1.0.17 → 1.0.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +25 -21
  2. package/package.json +6 -4
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Inkog MCP Server
2
2
 
3
- AI Security Platform for the Agentic Era - Available in Claude, ChatGPT, Cursor, and any MCP-compatible client.
3
+ The pre-flight check for AI agents - Available in Claude, ChatGPT, Cursor, and any MCP-compatible client.
4
4
 
5
5
  [![npm version](https://img.shields.io/npm/v/@inkog-io/mcp)](https://www.npmjs.com/package/@inkog-io/mcp)
6
6
  [![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)
@@ -8,14 +8,14 @@ AI Security Platform for the Agentic Era - Available in Claude, ChatGPT, Cursor,
8
8
 
9
9
  ## What is Inkog?
10
10
 
11
- Inkog is the **AI Security Platform (AISP)** for securing AI agents. It provides:
11
+ Inkog is a **static analysis tool for AI agents**. It verifies your agents are ready to ship. It provides:
12
12
 
13
- - **Vulnerability Scanning**: Detect prompt injection, infinite loops, token bombing, SQL injection via LLM
13
+ - **Logic Flaw Detection**: Find infinite loops, recursion risks, and missing exit conditions
14
+ - **Security Analysis**: Detect prompt injection paths, unconstrained tools, and data leakage risks
14
15
  - **AGENTS.md Governance**: Validate that code behavior matches governance declarations
15
- - **Compliance Reporting**: Generate reports for EU AI Act, NIST AI RMF, ISO 42001, OWASP LLM Top 10
16
- - **MCP Server Auditing**: Security audit any MCP server from the registry
17
- - **MLBOM Generation**: Create Machine Learning Bill of Materials for supply chain visibility
18
- - **Multi-Agent Security**: Audit Agent-to-Agent communications for security risks
16
+ - **Compliance Reporting**: Generate reports for EU AI Act, NIST AI RMF, OWASP LLM Top 10
17
+ - **MCP Server Auditing**: Audit any MCP server before installation
18
+ - **Multi-Agent Analysis**: Audit Agent-to-Agent communications for logic and security issues
19
19
 
20
20
  ## Installation
21
21
 
@@ -69,11 +69,11 @@ npm install -g @inkog-io/mcp
69
69
 
70
70
  ## Available Tools
71
71
 
72
- ### P0 - Core Security (Essential)
72
+ ### P0 - Core Analysis (Essential)
73
73
 
74
74
  | Tool | Description |
75
75
  |------|-------------|
76
- | `inkog_scan` | Scan AI agent code for security vulnerabilities |
76
+ | `inkog_scan` | Static analysis for logic flaws and security risks |
77
77
  | `inkog_verify_governance` | Validate AGENTS.md declarations match actual code behavior |
78
78
 
79
79
  ### P1 - Enterprise Features
@@ -82,10 +82,10 @@ npm install -g @inkog-io/mcp
82
82
  |------|-------------|
83
83
  | `inkog_compliance_report` | Generate EU AI Act, NIST, OWASP compliance reports |
84
84
  | `inkog_explain_finding` | Get detailed remediation guidance for findings |
85
- | `inkog_audit_mcp_server` | Security audit any MCP server |
85
+ | `inkog_audit_mcp_server` | Audit any MCP server before installation |
86
86
  | `inkog_generate_mlbom` | Generate ML Bill of Materials (CycloneDX, SPDX) |
87
87
 
88
- ### P2 - Multi-Agent Security
88
+ ### P2 - Multi-Agent Analysis
89
89
 
90
90
  | Tool | Description |
91
91
  |------|-------------|
@@ -95,16 +95,16 @@ npm install -g @inkog-io/mcp
95
95
 
96
96
  ### inkog_scan
97
97
 
98
- Scan AI agent code for security vulnerabilities.
98
+ Static analysis for AI agent code - finds logic flaws and security risks.
99
99
 
100
100
  ```
101
101
  Arguments:
102
102
  path (required) File or directory path to scan
103
- policy (optional) Security policy: low-noise, balanced, comprehensive, governance, eu-ai-act
103
+ policy (optional) Analysis policy: low-noise, balanced, comprehensive, governance, eu-ai-act
104
104
  output (optional) Output format: summary, detailed, sarif
105
105
  ```
106
106
 
107
- **Example**: "Scan my LangChain agent for vulnerabilities"
107
+ **Example**: "Scan my LangChain agent for logic flaws"
108
108
 
109
109
  ### inkog_verify_governance
110
110
 
@@ -227,9 +227,13 @@ npm run lint
227
227
 
228
228
  ## Why Inkog?
229
229
 
230
+ ### The Pre-Flight Check for AI Agents
231
+
232
+ Think of Inkog like the checklist pilots run before takeoff. You don't skip it even when you're confident. It verifies your agent is ready to ship.
233
+
230
234
  ### The Only Tool with AGENTS.md Verification
231
235
 
232
- Inkog is the **only security tool** that can validate your agent's governance declarations against its actual code behavior. This is essential for:
236
+ Inkog is the **only tool** that can validate your agent's governance declarations against its actual code behavior. This is essential for:
233
237
 
234
238
  - **EU AI Act Article 14** compliance (human oversight)
235
239
  - **Enterprise governance** requirements
@@ -237,17 +241,17 @@ Inkog is the **only security tool** that can validate your agent's governance de
237
241
 
238
242
  ### Purpose-Built for AI Agents
239
243
 
240
- Unlike traditional security scanners (Snyk, Semgrep, SonarQube), Inkog understands AI-specific vulnerabilities:
244
+ Unlike traditional code scanners (Snyk, Semgrep, SonarQube), Inkog understands AI-specific issues:
241
245
 
242
- - Prompt injection attacks
243
- - Infinite loops and token bombing
244
- - SQL injection via LLM output
246
+ - Infinite loops and recursion risks
247
+ - Prompt injection paths
248
+ - Unconstrained tool access
249
+ - Missing exit conditions
245
250
  - Cross-tenant data leakage
246
- - Recursive tool calling
247
251
 
248
252
  ### Multi-Framework Support
249
253
 
250
- Inkog's Universal IR (Intermediate Representation) works with any agent framework. Add one integration, get security for all frameworks.
254
+ Inkog's Universal IR (Intermediate Representation) works with any agent framework. Add one integration, get analysis for all frameworks.
251
255
 
252
256
  ## License
253
257
 
package/package.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "name": "@inkog-io/mcp",
3
- "version": "1.0.17",
3
+ "version": "1.0.18",
4
4
  "mcpName": "io.github.inkog-io/inkog",
5
- "description": "Scan AI agents for security vulnerabilities. Audit MCP servers before installation.",
5
+ "description": "The pre-flight check for AI agents. Static analysis for logic flaws, security risks, and compliance.",
6
6
  "author": "Inkog <hello@inkog.io>",
7
7
  "license": "Apache-2.0",
8
8
  "repository": {
@@ -12,8 +12,10 @@
12
12
  "homepage": "https://inkog.io",
13
13
  "keywords": [
14
14
  "mcp",
15
- "ai-security",
16
15
  "ai-agents",
16
+ "static-analysis",
17
+ "agent-readiness",
18
+ "pre-flight-check",
17
19
  "agents-md",
18
20
  "governance",
19
21
  "compliance",
@@ -21,7 +23,7 @@
21
23
  "langchain",
22
24
  "crewai",
23
25
  "langgraph",
24
- "vulnerability-scanner"
26
+ "infinite-loop-detection"
25
27
  ],
26
28
  "type": "module",
27
29
  "main": "dist/index.js",