mcpbeat

Agent Sec MCP Server

ai.kernora/agent-sec
answering

Agent Sec is answering right now. Last checked 11 min ago. It exposes 2 tools. Last commit 1 Aug 2026.

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

Uptime history 40 hours of history
40 hours agonow
100.0%
Uptime 24h
91 of 91 checks
2
Tools
read from the server
88 ms
Response time
average over 24h
1
Stars
last commit 1 Aug 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

run in your terminal
claude mcp add agent-sec --transport http https://agentsec.kernora.ai/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "agent-sec": {
      "url": "https://agentsec.kernora.ai/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.agent-sec]
url = "https://agentsec.kernora.ai/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "agent-sec": {
      "url": "https://agentsec.kernora.ai/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "agent-sec": {
      "url": "https://agentsec.kernora.ai/mcp"
    }
  }
}

Available tools 2

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

action
check_action
Advisory check: given a described action or command the agent is about to take, return the baseline security factlets that plausibly apply, so the agent can self-correct. Advisory only — does NOT block. Real-time blocking is Kernora Agent Security's paid Integrity Plane.
security
get_security_baseline
Return Kernora Agent Security's curated security baseline — the known-good rules an AI coding agent should follow (secrets, injection, supply-chain, destructive ops, data protection). Advisory grounding.

Endpoints

URLTransportStateLatencyChecked
https://agentsec.kernora.ai/mcp streamable-http answering 90 ms 11 min ago

Agent Sec — questions

Answers built from our own checks of this server.

What can Agent Sec do?
It exposes 2 tools, read directly from the server on our last check. Among them: check_action, get_security_baseline. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Agent Sec working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 88 ms. The bar chart above shows every period we have measured.
How do I connect Agent Sec?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Agent Sec need an API key?
No. Agent Sec completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 2 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Agent Sec?
It answers our handshake in 88 ms on average, which is faster than 87% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Agent Sec open source?
Yes — it is published under the Apache-2.0 licence, written in JavaScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.