AI agent security scanner

Scan risky MCP and AI-agent permissions before they touch production.

AgentFence finds broad filesystem access, secret exposure, destructive commands, unsafe runtime settings, and policy gaps in tool-connected LLM workflows.

Join paid beta Run locally 
$ npx agentfence scan --path .
AgentFence scan complete
Risk score: 100/100 (critical)
Findings: 2 critical, 3 high, 6 medium

Why it matters

AI agents are gaining shell, file, API, and secret access faster than review processes can keep up.

Find risky access

Detect broad paths, admin-like scopes, wildcard network permissions, and shell-enabled workflows.

Catch sharp edges

Flag destructive command patterns, secret-looking config keys, and unsafe runtime settings.

Ship with CI

Generate JSON, HTML, and SARIF reports, then fail builds by score or severity.

Paid beta

AgentFence Beta: monthly AI-agent security review for $19/month.

For small teams and agencies using MCP servers, coding agents, and tool-connected LLM workflows. Get up to 3 repositories scanned, a monthly risk report, and prioritized remediation notes.

$19/month

  • Up to 3 repositories
  • MCP and agent config review
  • JSON, SARIF, and HTML report guidance
  • Monthly remediation summary
Request beta access

Usage

Start with a local scan.

npx agentfence scan --path . \
  --json agentfence-report.json \
  --sarif agentfence-report.sarif \
  --fail-on high

GitHub Action

Add AgentFence to pull requests.

- uses: Dev-Atmos/AgentFence@main
  with:
    path: .
    fail-on: high
    sarif: agentfence-report.sarif