{"_id":"@agent-audit/cli","_rev":"3-a840004e20fea23b6105d52103936542","name":"@agent-audit/cli","dist-tags":{"latest":"0.2.2"},"versions":{"0.2.0":{"name":"@agent-audit/cli","version":"0.2.0","keywords":["mcp","security","audit","agents","llm","cli","cursor","claude","tool-calling"],"license":"MIT","_id":"@agent-audit/cli@0.2.0","maintainers":[{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"}],"bin":{"agent-audit":"dist/index.js"},"dist":{"shasum":"a456fadecb9b7d7cd78d691b3c9fb4fc8b64edd1","tarball":"https://registry.npmjs.org/@agent-audit/cli/-/cli-0.2.0.tgz","fileCount":5,"integrity":"sha512-GtFhPJQa/2QJ9nRuRFHOpHMvTMZmxXQ5RnXb7XrenudPZPOCB88agaEilu6tj9ibj1M/l8k6l5N0UgIgBGLe3w==","signatures":[{"sig":"MEYCIQCxjcnGmhztZU9SxyzgH7y/uFoOPLdtoPGEPeBhvQksKAIhALIIJVcn+JLLsCAKhGpFg6/u6dAazkd2unF8vNuiO27X","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":6227},"main":"./dist/index.js","type":"module","_from":"file:agent-audit-cli-0.2.0.tgz","types":"./dist/index.d.ts","engines":{"node":">=20"},"scripts":{"build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"},"_resolved":"C:\\Users\\matto\\AppData\\Local\\Temp\\95deef8bf09e2960fd14f06749ad2487\\agent-audit-cli-0.2.0.tgz","_integrity":"sha512-GtFhPJQa/2QJ9nRuRFHOpHMvTMZmxXQ5RnXb7XrenudPZPOCB88agaEilu6tj9ibj1M/l8k6l5N0UgIgBGLe3w==","_npmVersion":"11.7.0","description":"Static security audit for MCP configs and agent tool code","directories":{},"_nodeVersion":"24.5.0","dependencies":{"commander":"^13.1.0","@agent-audit/core":"0.2.0","@agent-audit/rules":"0.2.0","@agent-audit/reporter":"0.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.2"},"_npmOperationalInternal":{"tmp":"tmp/cli_0.2.0_1780193453123_0.6279010229551334","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@agent-audit/cli","version":"0.2.1","keywords":["mcp","security","audit","agents","llm","cli","cursor","claude","tool-calling"],"license":"MIT","_id":"@agent-audit/cli@0.2.1","maintainers":[{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"}],"homepage":"https://github.com/agent-audit/agent-audit#readme","bugs":{"url":"https://github.com/agent-audit/agent-audit/issues"},"bin":{"agent-audit":"dist/index.js"},"dist":{"shasum":"6aed41db47d5efa1fd8c360feaa3e52b929c6fc7","tarball":"https://registry.npmjs.org/@agent-audit/cli/-/cli-0.2.1.tgz","fileCount":6,"integrity":"sha512-DOBHK0qcxz1nKHIhuASIMJlaSnff7Ly1OnFwJd6n7FEyZUtHHcfepNGtPLhX8fAi1YwVcbB3CoQkoBKi+d0w7w==","signatures":[{"sig":"MEUCIBVr5ODDCRlrmvwUMC1SetMZEq8VhtlCGugmbHDAptTqAiEAx91qbYaZit9gcs1oziKHp+rywEeMqnuWIaT1+qrqjL0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":9869},"main":"./dist/index.js","type":"module","_from":"file:agent-audit-cli-0.2.1.tgz","types":"./dist/index.d.ts","engines":{"node":">=20"},"scripts":{"build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"},"_resolved":"C:\\Users\\matto\\AppData\\Local\\Temp\\0e02501184b732a589b2469f0ee972d2\\agent-audit-cli-0.2.1.tgz","_integrity":"sha512-DOBHK0qcxz1nKHIhuASIMJlaSnff7Ly1OnFwJd6n7FEyZUtHHcfepNGtPLhX8fAi1YwVcbB3CoQkoBKi+d0w7w==","repository":{"url":"git+https://github.com/agent-audit/agent-audit.git","type":"git","directory":"packages/cli"},"_npmVersion":"11.7.0","description":"Static security audit for MCP configs and agent tool code","directories":{},"_nodeVersion":"24.5.0","dependencies":{"commander":"^13.1.0","@agent-audit/core":"0.2.0","@agent-audit/rules":"0.2.0","@agent-audit/reporter":"0.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.2"},"_npmOperationalInternal":{"tmp":"tmp/cli_0.2.1_1780200414161_0.7239110309597223","host":"s3://npm-registry-packages-npm-production"}},"0.2.2":{"name":"@agent-audit/cli","version":"0.2.2","description":"Static security audit for MCP configs and agent tool code","type":"module","license":"MIT","homepage":"https://github.com/mattspider/agent-audit#readme","repository":{"type":"git","url":"git+https://github.com/mattspider/agent-audit.git","directory":"packages/cli"},"bugs":{"url":"https://github.com/mattspider/agent-audit/issues"},"publishConfig":{"access":"public"},"bin":{"agent-audit":"dist/index.js"},"main":"./dist/index.js","types":"./dist/index.d.ts","dependencies":{"commander":"^13.1.0","@agent-audit/core":"0.2.0","@agent-audit/reporter":"0.2.0","@agent-audit/rules":"0.2.0"},"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.2"},"keywords":["mcp","security","audit","agents","llm","cli","cursor","claude","tool-calling"],"engines":{"node":">=20"},"scripts":{"build":"tsup","typecheck":"tsc --noEmit"},"_id":"@agent-audit/cli@0.2.2","_integrity":"sha512-JnrWzegZMfnMryl26Bd/dsmsgoQpGxd587sN5WGbJjs/69U90rg2+W2PqzfwubSld9PsVp3Ak7s/nN2qCEH5sA==","_resolved":"C:\\Users\\matto\\AppData\\Local\\Temp\\4589e1657928e80c41ec664a1d0dd416\\agent-audit-cli-0.2.2.tgz","_from":"file:agent-audit-cli-0.2.2.tgz","_nodeVersion":"24.5.0","_npmVersion":"11.7.0","dist":{"integrity":"sha512-JnrWzegZMfnMryl26Bd/dsmsgoQpGxd587sN5WGbJjs/69U90rg2+W2PqzfwubSld9PsVp3Ak7s/nN2qCEH5sA==","shasum":"a2273c22cdfe9c04c3a28f0464b075adc9c7c5db","tarball":"https://registry.npmjs.org/@agent-audit/cli/-/cli-0.2.2.tgz","fileCount":6,"unpackedSize":9948,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIC75mNHgC+hTkyQTJ97PR/jQUTxOdloCslcii1V6A2OSAiEA0Lb6yYEflP2MLATD7tj18v6wwebetAZDb/FwW8wEd8U="}]},"_npmUser":{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"},"directories":{},"maintainers":[{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/cli_0.2.2_1780201491637_0.24486811890273774"},"_hasShrinkwrap":false}},"time":{"created":"2026-05-31T02:10:52.945Z","modified":"2026-05-31T04:24:51.885Z","0.2.0":"2026-05-31T02:10:53.308Z","0.2.1":"2026-05-31T04:06:54.293Z","0.2.2":"2026-05-31T04:24:51.779Z"},"bugs":{"url":"https://github.com/mattspider/agent-audit/issues"},"license":"MIT","homepage":"https://github.com/mattspider/agent-audit#readme","keywords":["mcp","security","audit","agents","llm","cli","cursor","claude","tool-calling"],"repository":{"type":"git","url":"git+https://github.com/mattspider/agent-audit.git","directory":"packages/cli"},"description":"Static security audit for MCP configs and agent tool code","maintainers":[{"name":"matheus_soares","email":"matt.oliveira.soares@gmail.com"}],"readme":"# @agent-audit/cli\r\n\r\nStatic security audit for **MCP configs** and **AI agent tool definitions** in TypeScript/Python.\r\n\r\n[![npm version](https://img.shields.io/npm/v/@agent-audit/cli?style=flat-square)](https://www.npmjs.com/package/@agent-audit/cli)\r\n[![license](https://img.shields.io/npm/l/@agent-audit/cli?style=flat-square)](https://www.npmjs.com/package/@agent-audit/cli)\r\n[![node](https://img.shields.io/node/v/@agent-audit/cli?style=flat-square)](https://www.npmjs.com/package/@agent-audit/cli)\r\n\r\n## Install\r\n\r\n```bash\r\nnpm install -D @agent-audit/cli\r\n```\r\n\r\n```bash\r\npnpm add -D @agent-audit/cli\r\n```\r\n\r\n## Quick start\r\n\r\n```bash\r\n# Scan MCP configs + agent tool code (default)\r\nnpx agent-audit scan\r\n\r\n# MCP configs only\r\nnpx agent-audit scan --mcp-only\r\n\r\n# TypeScript/Python tools only\r\nnpx agent-audit scan --code-only ./src\r\n```\r\n\r\nAdd to `package.json`:\r\n\r\n```json\r\n{\r\n  \"scripts\": {\r\n    \"audit\": \"agent-audit scan\"\r\n  }\r\n}\r\n```\r\n\r\n## Example output\r\n\r\n```\r\nagent-audit v0.2.0 — scanned 2 file(s) in 46ms\r\n\r\n ERROR  mcp/broad-filesystem\r\n        .cursor/mcp.json → $.mcpServers.filesystem\r\n        Filesystem server exposes overly broad paths\r\n\r\n ERROR  code/secret-in-tool\r\n        src/agent.ts → fetchWithSecret\r\n        Tool contains a potential hardcoded secret\r\n\r\n────────────────────────────────────────\r\n  2 error · 0 warning · 0 info\r\n```\r\n\r\n## What it scans\r\n\r\n| Target | Files |\r\n|--------|-------|\r\n| MCP | `mcp.json`, `.cursor/mcp.json`, `claude_desktop_config.json` |\r\n| Code | `*.ts`, `*.tsx`, `*.py` — Vercel AI `tool()`, OpenAI tools, LangChain `@tool` |\r\n\r\n**15 built-in rules** — secrets, dangerous commands, filesystem scope, destructive tool names, and more.\r\n\r\n## CI\r\n\r\n```yaml\r\n- run: npx @agent-audit/cli scan --format sarif > agent-audit.sarif\r\n```\r\n\r\nRequires **Node.js 20+**.\r\n\r\n## Links\r\n\r\n- **Documentation:** https://github.com/mattspider/agent-audit#readme\r\n- **Issues:** https://github.com/mattspider/agent-audit/issues\r\n- **Repository:** https://github.com/mattspider/agent-audit\r\n\r\n## License\r\n\r\nMIT\r\n","readmeFilename":"README.npm.md"}