GenParkAgentMCPToolPermissionLeastPrivilegeAuditor
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
genpark-agent-mcp-tool-permission-least-privilege-auditor-skill
Production-hardened Agentic Cybersecurity & Red-Teaming skill engineered strictly with Python standard library. Provides real-time injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs via the Model Context Protocol (MCP).
Architecture & Data Flow
flowchart TD
Payload[Untrusted Prompt / RAG Context / Agent Action] --> Inspector[Telemetry Ingestion]
Inspector --> Core["GenParkAgentMCPToolPermissionLeastPrivilegeAuditor"]
Core --> Detection[Cryptographic / Heuristic Analysis Engine]
Detection --> Mitigation[Least-Privilege & Boundary Enforcement]
Mitigation --> MCPOutput[MCP Result / Quarantine Signal / Merkle Seal]Related MCP server: GenParkAgentRedTeamIndirectInjectionFuzzer
Quickstart & Usage
1. Direct Python Client Execution
python example_usage.py2. Standalone MCP Server Launch
Run the native STDIO MCP server:
python mcp_server.pyLicense
This project is licensed under the MIT License - see the LICENSE file for details.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.
Formally-verified injection/exfiltration detector for AI agents (MCP-02).
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceEnables secure, stateful AI agents and LLM tools to access enterprise databases, knowledge bases, live system metrics, and sandboxed code execution through the Model Context Protocol, with authentication, rate limiting, and safety guards.-
- AlicenseNot gradedqualityBmaintenanceEnables red-team testing of AI agents against indirect prompt injection by fuzzing payloads with delimiter evasion and Unicode homoglyphs, detecting exfiltration canaries, enforcing least-privilege tool boundaries, and producing cryptographic audit proofs.7MIT
- AlicenseNot gradedqualityNot gradedmaintenanceEnables real-time indirect prompt injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs over MCP.MIT
- AlicenseNot gradedqualityBmaintenanceEnables real-time injection fuzzing and canary-based exfiltration detection over untrusted prompts, RAG context, and agent actions, with entropy analysis, outbound channel interception, least-privilege sandboxing, and cryptographic audit proofs.7MIT