Scan an MCP server for security vulnerabilities, description quality, and architecture issues. Checks for path traversal, command injection, SQL injection, SSRF, hardcoded credentials, and unsafe deserialization. Scores tool descriptions for scenario triggers, parameter docs, and disambiguation. Returns a security rating (F/C/B/A/A+) with actionable recommendations. Use when evaluating whether an MCP server is safe to install or deploy.

Scan an AI agent installation for security issues. Checks agent configuration (gateway binding, authentication, sandbox, API keys in plaintext, DM policy, tool permissions, SSRF protection, file permissions, log redaction) and installed skills for malicious patterns (reverse shells, credential theft, prompt injection, toxic data flows). Returns findings with severity levels and fix hints. Use when auditing an agent's security posture or before deploying an agent to production.