trackmcp
Back to directory
CSOAI-ORG

owasp-agentic-mcp

View on GitHub

OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, excessive agency, data leakage assessment

0 stars PythonOthers Updated Sep 4, 2026
mcpsecurityai-governancemcp-servermeok-ai-labsai-securitymodel-context-protocolprompt-injectiona2aagentic-aimeokai-agentsclaudecompliancecsoai

Documentation

MCP Scorecard: 86/100

Owasp Agentic MCP

MEOK AI Labs
GSPC
License
PyPI

> OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, exc...

OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, excessive agency, data leakage assessment


🚀 Quick Start

bash
# Install via pip
pip install owasp_agentic_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install owasp-agentic-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? **Book a free 15-min diagnostic →**

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the **MEOK AI Labs** ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG


Built with 💜 by · UK Companies House 16939677

Security assessment tools based on the OWASP Top 10 for AI Agents. Scan agent configurations for prompt injection vulnerabilities, tool poisoning risks, excessive agency, data leakage, and more.

Tools

ToolDescriptionParameters
`full_agent_scan`Full OWASP Agentic Top 10 security scan`agent_config`, `tools`, `permissions`
`assess_agentic_security`Assess against specific OWASP Agentic categories`categories`, `agent_config`
`check_prompt_injection`Test for prompt injection vulnerabilities`system_prompt`, `user_input_template`
`check_tool_poisoning`Check for tool poisoning risks`tool_definitions`, `input_validation`
`check_excessive_agency`Assess agency level vs minimum required`allowed_tools`, `required_tools`, `permissions`

Installation

bash
pip install mcp

Claude Desktop / Cursor / VS Code / Windsurf

json
{
  "mcpServers": {
    "owasp-agentic": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Usage Examples

Full agent security scan

json
{
  "agent_config": {
    "system_prompt": "You are a helpful assistant that can access email, calendar, and file system.",
    "allowed_tools": ["send_email", "read_calendar", "write_file"]
  },
  "permissions": ["email:send", "calendar:read", "files:write"]
}

Check prompt injection

json
{
  "system_prompt": "You are a financial advisor bot",
  "user_input_template": "{user_query} Please provide investment advice."
}

Pricing

  • Free: 10 scans/day
  • Pro: $99/mo — unlimited scans + detailed reports
  • Enterprise: $499/mo — continuous monitoring + custom rules

*Built by MEOK AI Labs | meok.ai*

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDF
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)
Founder Call£2930-min 1-on-1 with the founder

> Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet.

> Verify any signed report at .

Frequently asked questions

What is owasp-agentic-mcp?

owasp-agentic-mcp is OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, excessive agency, data leakage assessment

How do I install owasp-agentic-mcp?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is owasp-agentic-mcp open source?

Yes — it is hosted on GitHub at https://github.com/CSOAI-ORG/owasp-agentic-mcp.

Related MCP tools

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP