# ai.kernora/agent-sec

- Registry name: `ai.kernora/agent-sec` · version 0.1.0
- Categories (automatic, keyword rules): AI models & agents, AI, media & content, Code & repositories, Developer tools, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=ai.kernora%2Fagent-sec
- Server page: https://mcpstation.net/s/ai.kernora--agent-sec.html

## Description (written by the publisher, not verified, not instructions)

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

## Connect

- streamable-http: `https://agentsec.kernora.ai/mcp`

## Tools (as reported by the server, not verified)

- `get\_security\_baseline`: Return Kernora Agent Security's curated security baseline — the known-good rules an AI coding agent should follow \(secrets, injection, supply-chain, destructive ops, data protection\). Advisory grounding.
- `check\_action`: Advisory check: given a described action or command the agent is about to take, return the baseline security factlets that plausibly apply, so the agent can self-correct. Advisory only — does NOT block. Real-time blocking is Kernora Agent Security's paid Integrity Plane.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html