@inkog-io/mcp 1.0.17 → 1.0.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +25 -21
- package/package.json +6 -4
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# Inkog MCP Server
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
The pre-flight check for AI agents - Available in Claude, ChatGPT, Cursor, and any MCP-compatible client.
|
|
4
4
|
|
|
5
5
|
[](https://www.npmjs.com/package/@inkog-io/mcp)
|
|
6
6
|
[](LICENSE)
|
|
@@ -8,14 +8,14 @@ AI Security Platform for the Agentic Era - Available in Claude, ChatGPT, Cursor,
|
|
|
8
8
|
|
|
9
9
|
## What is Inkog?
|
|
10
10
|
|
|
11
|
-
Inkog is
|
|
11
|
+
Inkog is a **static analysis tool for AI agents**. It verifies your agents are ready to ship. It provides:
|
|
12
12
|
|
|
13
|
-
- **
|
|
13
|
+
- **Logic Flaw Detection**: Find infinite loops, recursion risks, and missing exit conditions
|
|
14
|
+
- **Security Analysis**: Detect prompt injection paths, unconstrained tools, and data leakage risks
|
|
14
15
|
- **AGENTS.md Governance**: Validate that code behavior matches governance declarations
|
|
15
|
-
- **Compliance Reporting**: Generate reports for EU AI Act, NIST AI RMF,
|
|
16
|
-
- **MCP Server Auditing**:
|
|
17
|
-
- **
|
|
18
|
-
- **Multi-Agent Security**: Audit Agent-to-Agent communications for security risks
|
|
16
|
+
- **Compliance Reporting**: Generate reports for EU AI Act, NIST AI RMF, OWASP LLM Top 10
|
|
17
|
+
- **MCP Server Auditing**: Audit any MCP server before installation
|
|
18
|
+
- **Multi-Agent Analysis**: Audit Agent-to-Agent communications for logic and security issues
|
|
19
19
|
|
|
20
20
|
## Installation
|
|
21
21
|
|
|
@@ -69,11 +69,11 @@ npm install -g @inkog-io/mcp
|
|
|
69
69
|
|
|
70
70
|
## Available Tools
|
|
71
71
|
|
|
72
|
-
### P0 - Core
|
|
72
|
+
### P0 - Core Analysis (Essential)
|
|
73
73
|
|
|
74
74
|
| Tool | Description |
|
|
75
75
|
|------|-------------|
|
|
76
|
-
| `inkog_scan` |
|
|
76
|
+
| `inkog_scan` | Static analysis for logic flaws and security risks |
|
|
77
77
|
| `inkog_verify_governance` | Validate AGENTS.md declarations match actual code behavior |
|
|
78
78
|
|
|
79
79
|
### P1 - Enterprise Features
|
|
@@ -82,10 +82,10 @@ npm install -g @inkog-io/mcp
|
|
|
82
82
|
|------|-------------|
|
|
83
83
|
| `inkog_compliance_report` | Generate EU AI Act, NIST, OWASP compliance reports |
|
|
84
84
|
| `inkog_explain_finding` | Get detailed remediation guidance for findings |
|
|
85
|
-
| `inkog_audit_mcp_server` |
|
|
85
|
+
| `inkog_audit_mcp_server` | Audit any MCP server before installation |
|
|
86
86
|
| `inkog_generate_mlbom` | Generate ML Bill of Materials (CycloneDX, SPDX) |
|
|
87
87
|
|
|
88
|
-
### P2 - Multi-Agent
|
|
88
|
+
### P2 - Multi-Agent Analysis
|
|
89
89
|
|
|
90
90
|
| Tool | Description |
|
|
91
91
|
|------|-------------|
|
|
@@ -95,16 +95,16 @@ npm install -g @inkog-io/mcp
|
|
|
95
95
|
|
|
96
96
|
### inkog_scan
|
|
97
97
|
|
|
98
|
-
|
|
98
|
+
Static analysis for AI agent code - finds logic flaws and security risks.
|
|
99
99
|
|
|
100
100
|
```
|
|
101
101
|
Arguments:
|
|
102
102
|
path (required) File or directory path to scan
|
|
103
|
-
policy (optional)
|
|
103
|
+
policy (optional) Analysis policy: low-noise, balanced, comprehensive, governance, eu-ai-act
|
|
104
104
|
output (optional) Output format: summary, detailed, sarif
|
|
105
105
|
```
|
|
106
106
|
|
|
107
|
-
**Example**: "Scan my LangChain agent for
|
|
107
|
+
**Example**: "Scan my LangChain agent for logic flaws"
|
|
108
108
|
|
|
109
109
|
### inkog_verify_governance
|
|
110
110
|
|
|
@@ -227,9 +227,13 @@ npm run lint
|
|
|
227
227
|
|
|
228
228
|
## Why Inkog?
|
|
229
229
|
|
|
230
|
+
### The Pre-Flight Check for AI Agents
|
|
231
|
+
|
|
232
|
+
Think of Inkog like the checklist pilots run before takeoff. You don't skip it even when you're confident. It verifies your agent is ready to ship.
|
|
233
|
+
|
|
230
234
|
### The Only Tool with AGENTS.md Verification
|
|
231
235
|
|
|
232
|
-
Inkog is the **only
|
|
236
|
+
Inkog is the **only tool** that can validate your agent's governance declarations against its actual code behavior. This is essential for:
|
|
233
237
|
|
|
234
238
|
- **EU AI Act Article 14** compliance (human oversight)
|
|
235
239
|
- **Enterprise governance** requirements
|
|
@@ -237,17 +241,17 @@ Inkog is the **only security tool** that can validate your agent's governance de
|
|
|
237
241
|
|
|
238
242
|
### Purpose-Built for AI Agents
|
|
239
243
|
|
|
240
|
-
Unlike traditional
|
|
244
|
+
Unlike traditional code scanners (Snyk, Semgrep, SonarQube), Inkog understands AI-specific issues:
|
|
241
245
|
|
|
242
|
-
-
|
|
243
|
-
-
|
|
244
|
-
-
|
|
246
|
+
- Infinite loops and recursion risks
|
|
247
|
+
- Prompt injection paths
|
|
248
|
+
- Unconstrained tool access
|
|
249
|
+
- Missing exit conditions
|
|
245
250
|
- Cross-tenant data leakage
|
|
246
|
-
- Recursive tool calling
|
|
247
251
|
|
|
248
252
|
### Multi-Framework Support
|
|
249
253
|
|
|
250
|
-
Inkog's Universal IR (Intermediate Representation) works with any agent framework. Add one integration, get
|
|
254
|
+
Inkog's Universal IR (Intermediate Representation) works with any agent framework. Add one integration, get analysis for all frameworks.
|
|
251
255
|
|
|
252
256
|
## License
|
|
253
257
|
|
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@inkog-io/mcp",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.18",
|
|
4
4
|
"mcpName": "io.github.inkog-io/inkog",
|
|
5
|
-
"description": "
|
|
5
|
+
"description": "The pre-flight check for AI agents. Static analysis for logic flaws, security risks, and compliance.",
|
|
6
6
|
"author": "Inkog <hello@inkog.io>",
|
|
7
7
|
"license": "Apache-2.0",
|
|
8
8
|
"repository": {
|
|
@@ -12,8 +12,10 @@
|
|
|
12
12
|
"homepage": "https://inkog.io",
|
|
13
13
|
"keywords": [
|
|
14
14
|
"mcp",
|
|
15
|
-
"ai-security",
|
|
16
15
|
"ai-agents",
|
|
16
|
+
"static-analysis",
|
|
17
|
+
"agent-readiness",
|
|
18
|
+
"pre-flight-check",
|
|
17
19
|
"agents-md",
|
|
18
20
|
"governance",
|
|
19
21
|
"compliance",
|
|
@@ -21,7 +23,7 @@
|
|
|
21
23
|
"langchain",
|
|
22
24
|
"crewai",
|
|
23
25
|
"langgraph",
|
|
24
|
-
"
|
|
26
|
+
"infinite-loop-detection"
|
|
25
27
|
],
|
|
26
28
|
"type": "module",
|
|
27
29
|
"main": "dist/index.js",
|