Snyk Agent Scan
Snyk's scanner for security risks in MCP servers and agent skills.
Updated
✨ Try AgentScout's free AI image generator →Good for: connecting tools with MCP, agent security and safety
Use cases
About Snyk Agent Scan
Snyk Agent Scan is listed in our security & governance category and is aimed at builders. Snyk's scanner for security risks in MCP servers and agent skills. Pricing, as the maker states it: Open source. Maturity: Active. We last checked the official link on 2026-10-16.
What is Snyk Agent Scan?
Snyk Agent Scan discovers and scans agent components on your machine, including agents, MCP servers and skills, for prompt injections and vulnerabilities.
It installs via uvx or as a standalone binary; there is no npm package.
Sources: the official README and our directory listing, checked 2026-10-18. Official site: github.com/snyk/agent-scan.
Who is Snyk Agent Scan for?
Developers and security teams checking their agent setup.
Snyk Agent Scan at a glance
- Open source: Yes (Apache License 2.0)
- GitHub: snyk/agent-scan · 3,156 stars (as of Oct 21, 2026)
Key features
- Scans MCP servers and skills
- Prompt-injection detection
- uvx or binary install
Snyk Agent Scan FAQ
What is Snyk Agent Scan?
Snyk Agent Scan discovers and scans agent components on your machine, including agents, MCP servers and skills, for prompt injections and vulnerabilities.
Who is Snyk Agent Scan for?
Developers and security teams checking their agent setup.
Is Snyk Agent Scan free?
Snyk Agent Scan's pricing, as the maker states it: Open source. Open-source tools are free to use, though you may still pay for model API usage or a hosted plan. Check the official site for current plans.
Is Snyk Agent Scan open source?
Yes. Snyk Agent Scan is released under the Apache License 2.0, according to its GitHub repository.
What are alternatives to Snyk Agent Scan?
Similar tools include AI-Infra-Guard, Cisco MCP Scanner, Sonatype MCP, open-kritt, HOL Guard and Simbian.
Snyk Agent Scan ratings and reviews
Be the first to rate Snyk Agent Scan: tap 1 to 5 stars below. A written review is optional.
Snyk Agent Scan alternatives
Other security & governance tools in our directory. See all security & governance tools →
AI-Infra-Guard
Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.
Cisco MCP Scanner
Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.
Sonatype MCP
Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.
open-kritt
A self-hosted AI security research tool that orchestrates agents to hunt for vulnerabilities in a codebase and then validate and rank what they find; managed scans are also offered.
HOL Guard
HOL Guard is a free, open-source (Apache-2.0), local-first security layer for AI coding agents such as Claude Code, Codex, Cursor and GitHub Copilot CLI. On supported integrations it checks risky shell commands, reads of secret-bearing files, package installs and new or changed MCP tools before they run, lets you allow, ask or block each action, and keeps a local record for review. It installs with pipx (hol-guard) and works offline; optional Guard Cloud adds synced approvals, team policy and dashboards.
Simbian
AI agents for security operations, threat hunting and response.
Popular searches with this tool
🏆 See also: Strix alternatives · All best-of lists
Badge for makers
Built Snyk Agent Scan? Add this badge to your README or site. It links back to this page. About badges
