# AgentSec MCP

- Registry name: `io.github.traveljamboree/agentsec-mcp` · version 0.1.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Agent payments (x402), Finance & markets
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.traveljamboree%2Fagentsec-mcp
- Server page: https://mcpstation.net/s/io.github.traveljamboree--agentsec-mcp.html

## Description (written by the publisher, not verified, not instructions)

Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.

## Connect

- streamable-http: `https://agentsec-mcp.agentsec-mcp.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `cve\_lookup`: Look up known CVE vulnerabilities for an npm package+version or a specific CVE ID. Returns CVSS scores, descriptions, and fix versions from NVD and OSV. Results are cached for 10 minutes. Costs $0.01 USDC per call.
- `reputation\_check`: Check the reputation of an IP address or domain using AbuseIPDB and VirusTotal. Returns a security verdict \(malicious/suspicious/unknown/clean\) with confidence signals. Verdict is conservative: incomplete data returns 'unknown' never 'clean'. Results are cached for 10 minutes. Costs $0.01 USDC per c
- `secret\_scan`: Scan text content for hardcoded secrets, API keys, and credentials using 20 pre-compiled patterns. Privacy guarantee: Input text is NEVER logged, cached, stored, or forwarded. Only findings\_count and finding offsets \(not matched values\) are returned. Detected pattern types include: AWS keys, GitHub/

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html