GenParkAgentMCPToolPermissionLeastPrivilegeAuditor
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@GenParkAgentMCPToolPermissionLeastPrivilegeAuditoraudit this agent tool call for injection payloads and exfiltration canaries"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
genpark-agent-mcp-tool-permission-least-privilege-auditor-skill
Production-hardened Agentic Cybersecurity & Red-Teaming skill engineered strictly with Python standard library. Provides real-time injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs via the Model Context Protocol (MCP).
Architecture & Data Flow
flowchart TD
Payload[Untrusted Prompt / RAG Context / Agent Action] --> Inspector[Telemetry Ingestion]
Inspector --> Core["GenParkAgentMCPToolPermissionLeastPrivilegeAuditor"]
Core --> Detection[Cryptographic / Heuristic Analysis Engine]
Detection --> Mitigation[Least-Privilege & Boundary Enforcement]
Mitigation --> MCPOutput[MCP Result / Quarantine Signal / Merkle Seal]Related MCP server: GenParkAgentRedTeamIndirectInjectionFuzzer
Quickstart & Usage
1. Direct Python Client Execution
python example_usage.py2. Standalone MCP Server Launch
Run the native STDIO MCP server:
python mcp_server.pyLicense
This project is licensed under the MIT License - see the LICENSE file for details.
This server cannot be deployed
Maintenance
Related MCP Connectors
Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.
Formally-verified injection/exfiltration detector for AI agents (MCP-02).
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceEnables secure, stateful AI agents and LLM tools to access enterprise databases, knowledge bases, live system metrics, and sandboxed code execution through the Model Context Protocol, with authentication, rate limiting, and safety guards.-
- AlicenseNot gradedqualityBmaintenanceEnables red-team testing of AI agents against indirect prompt injection by fuzzing payloads with delimiter evasion and Unicode homoglyphs, detecting exfiltration canaries, enforcing least-privilege tool boundaries, and producing cryptographic audit proofs.7MIT
- AlicenseNot gradedqualityBmaintenanceEnables real-time indirect prompt injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs over MCP.7MIT
- AlicenseNot gradedqualityBmaintenanceEnables real-time injection fuzzing and canary-based exfiltration detection over untrusted prompts, RAG context, and agent actions, with entropy analysis, outbound channel interception, least-privilege sandboxing, and cryptographic audit proofs.7MIT