{"_id":"arc-security-mcp","_rev":"5-1ff0303a6b6aaa5c9bd59d85b8b77a51","name":"arc-security-mcp","dist-tags":{"latest":"0.5.1"},"versions":{"0.3.0":{"name":"arc-security-mcp","version":"0.3.0","keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode"],"author":{"url":"https://arcself.com","name":"Arc Self","email":"arc@arcself.com"},"license":"MIT","_id":"arc-security-mcp@0.3.0","maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"homepage":"https://arcself.com/mcp.html","bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"bin":{"arc-security-mcp":"bin/arc-security-mcp.js"},"dist":{"shasum":"789572dd642afd5e7a91a2f9c4a091094ad6ce58","tarball":"https://registry.npmjs.org/arc-security-mcp/-/arc-security-mcp-0.3.0.tgz","fileCount":5,"integrity":"sha512-FBlc3BPX5Pn2Jd95AiK34nNfSHuFG1DUoBGWsvXKxXBwRw3CSdyaBtphJZIkfDbjhbAuASVB/idGekymeYdotw==","signatures":[{"sig":"MEQCIB5h3t0X+oETIn28BYuCdIRsKSKO4kuiaXu46WpI3NdmAiAsDBSHkmwLoPFrP16QVFwUzrow712vUQ99DOnw6fvzYw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":134000},"engines":{"node":">=18"},"gitHead":"6b4cdd8acf05b1f1532b13a076718acc2f242e1a","_npmUser":{"name":"tvayssie","email":"tvayssie@yahoo.com"},"repository":{"url":"git+https://github.com/ArcSelf/arc-security-mcp.git","type":"git"},"_npmVersion":"10.9.4","description":"Scan AI agent skills and MCP servers for 25 attack classes including social engineering, soul poisoning, credential theft, and anti-detection. 1,177+ real findings from 438+ skill audits. OWASP Agentic AI Top 10 mapped. Intent analysis detects zero-code a","directories":{},"_nodeVersion":"22.22.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/arc-security-mcp_0.3.0_1771360875063_0.12799154256309686","host":"s3://npm-registry-packages-npm-production"}},"0.3.1":{"name":"arc-security-mcp","version":"0.3.1","keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode"],"author":{"url":"https://arcself.com","name":"Arc Self","email":"arc@arcself.com"},"license":"MIT","_id":"arc-security-mcp@0.3.1","maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"homepage":"https://arcself.com/mcp.html","bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"bin":{"arc-security-mcp":"bin/arc-security-mcp.js"},"dist":{"shasum":"d6166dfe662b12d986655aa4ee16456fd9e326d4","tarball":"https://registry.npmjs.org/arc-security-mcp/-/arc-security-mcp-0.3.1.tgz","fileCount":5,"integrity":"sha512-5rYF7Mw+j/BCMagJSjjHCbSY9ZGEHnxPqjXdmu4dPqR/YjyKOE8SL6pD59TGbVRscJE9tn7WtHQi5G1nDDk15A==","signatures":[{"sig":"MEUCIGBBjEj/uxw79xGQTGdI2mlHCLwdAl5RywTxxi/qs786AiEAqjlJMXpg3Xo8IAzusz6MtsLA4ffkPYOaZA838EPa/Oc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":137592},"engines":{"node":">=18"},"gitHead":"6b4cdd8acf05b1f1532b13a076718acc2f242e1a","_npmUser":{"name":"tvayssie","email":"tvayssie@yahoo.com"},"repository":{"url":"git+https://github.com/ArcSelf/arc-security-mcp.git","type":"git"},"_npmVersion":"10.9.4","description":"Scan AI agent skills and MCP servers for 25 attack classes including social engineering, soul poisoning, credential theft, and anti-detection. 1,177+ real findings from 438+ skill audits. OWASP Agentic AI Top 10 mapped. Intent analysis detects zero-code a","directories":{},"_nodeVersion":"22.22.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/arc-security-mcp_0.3.1_1771364209070_0.24923223245518744","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"arc-security-mcp","version":"0.4.0","keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode"],"author":{"url":"https://arcself.com","name":"Arc Self","email":"arc@arcself.com"},"license":"MIT","_id":"arc-security-mcp@0.4.0","maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"homepage":"https://arcself.com/mcp.html","bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"bin":{"arc-security-mcp":"bin/arc-security-mcp.js"},"dist":{"shasum":"12fda64920fd290fd9b0ea63ddb349c8859e2355","tarball":"https://registry.npmjs.org/arc-security-mcp/-/arc-security-mcp-0.4.0.tgz","fileCount":5,"integrity":"sha512-WH4PfYRzDrhysWUumw/lnt4PDjgQvOQFh+xVZWz+vAPOfXprDaxtHMZZKu24cww9Qu8J0MwTpq2CLJ85zL+mYw==","signatures":[{"sig":"MEQCIGugSuMo7Vp2cx+BF4GPJClmCcFTpBTR7nyhOI63d6NJAiA14/0MoCei85SxBRKVO8Ada6DrU5xaX+psGtVM6RBLpA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":146665},"engines":{"node":">=18"},"gitHead":"6b4cdd8acf05b1f1532b13a076718acc2f242e1a","_npmUser":{"name":"tvayssie","email":"tvayssie@yahoo.com"},"repository":{"url":"git+https://github.com/ArcSelf/arc-security-mcp.git","type":"git"},"_npmVersion":"10.9.4","description":"Scan AI agent skills and MCP servers for 25 attack classes. Real-time scanning: query ANY ClawHub skill, even unaudited ones — source is fetched and analyzed on the fly. 1,177+ findings from 438+ audits. OWASP Agentic AI Top 10 mapped. Intent analysis det","directories":{},"_nodeVersion":"22.22.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/arc-security-mcp_0.4.0_1771368727289_0.4945124586498941","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"name":"arc-security-mcp","version":"0.5.0","keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode","edr","runtime-monitoring","anomaly-detection","behavioral-analysis"],"author":{"url":"https://arcself.com","name":"Arc Self","email":"arc@arcself.com"},"license":"MIT","_id":"arc-security-mcp@0.5.0","maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"homepage":"https://arcself.com/mcp.html","bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"bin":{"arc-security-mcp":"bin/arc-security-mcp.js"},"dist":{"shasum":"1e6898dbf7888d7eab9030a81ed65376c4c321d7","tarball":"https://registry.npmjs.org/arc-security-mcp/-/arc-security-mcp-0.5.0.tgz","fileCount":5,"integrity":"sha512-rN8nGqcp8+5nrV1Ntxa59M9r9sWmO1O7tC3ReSrh0Hlf62FRtWoMfgvbWhycLR01JX8ygOk8xwOwQ8wlfWWNDQ==","signatures":[{"sig":"MEUCICLqc5ZYU8ilre8RwVoaZ5FKVksV+QbkRJFNC0yOPclzAiEAy85WG9PAOucYBb/h7bmrQP8x57pL0Lq7aCqaqKEKKW4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":160079},"engines":{"node":">=18"},"gitHead":"6b4cdd8acf05b1f1532b13a076718acc2f242e1a","_npmUser":{"name":"tvayssie","email":"tvayssie@yahoo.com"},"repository":{"url":"git+https://github.com/ArcSelf/arc-security-mcp.git","type":"git"},"_npmVersion":"10.9.4","description":"AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.","directories":{},"_nodeVersion":"22.22.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/arc-security-mcp_0.5.0_1771371493630_0.9643322654397586","host":"s3://npm-registry-packages-npm-production"}},"0.5.1":{"name":"arc-security-mcp","version":"0.5.1","mcpName":"com.arcself/arc-security","description":"AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.","publishConfig":{"access":"public"},"bin":{"arc-security-mcp":"bin/arc-security-mcp.js"},"keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode","edr","runtime-monitoring","anomaly-detection","behavioral-analysis"],"author":{"name":"Arc Self","email":"arc@arcself.com","url":"https://arcself.com"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/ArcSelf/arc-security-mcp.git"},"homepage":"https://arcself.com/mcp.html","engines":{"node":">=18"},"_id":"arc-security-mcp@0.5.1","gitHead":"6b4cdd8acf05b1f1532b13a076718acc2f242e1a","bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"_nodeVersion":"22.22.0","_npmVersion":"10.9.4","dist":{"integrity":"sha512-KIN6TKe6P3BarmMHHswf1hmYUbVEZM+3RZBOBmWkYcbOZ5U3OgQUKp6MY3pvOzTE49wwBk9/xqd3OUbRRXqQsw==","shasum":"90f2288b370b6b1508253ef38c1e35e4e362e83c","tarball":"https://registry.npmjs.org/arc-security-mcp/-/arc-security-mcp-0.5.1.tgz","fileCount":5,"unpackedSize":161654,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIAUksvpVtZhjPtbURAJDno+9oxIO1TwOAwq7cxzWWF7uAiAPYuyS+cu8qoSbSdYN43o8sitxXQo/DUh1otZ82Je0kQ=="}]},"_npmUser":{"name":"tvayssie","email":"tvayssie@yahoo.com"},"directories":{},"maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/arc-security-mcp_0.5.1_1771371815703_0.021644445084030295"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-17T20:41:14.951Z","modified":"2026-02-17T23:43:35.940Z","0.3.0":"2026-02-17T20:41:15.322Z","0.3.1":"2026-02-17T21:36:49.223Z","0.4.0":"2026-02-17T22:52:07.444Z","0.5.0":"2026-02-17T23:38:13.755Z","0.5.1":"2026-02-17T23:43:35.831Z"},"bugs":{"url":"https://github.com/ArcSelf/arc-security-mcp/issues"},"author":{"name":"Arc Self","email":"arc@arcself.com","url":"https://arcself.com"},"license":"MIT","homepage":"https://arcself.com/mcp.html","keywords":["mcp","security","mcp-server","clawhub","openclaw","ai-agent","agent-security","skills","audit","vulnerability","scanner","prompt-injection","soul-engineering","model-context-protocol","claude","cursor","vscode","edr","runtime-monitoring","anomaly-detection","behavioral-analysis"],"repository":{"type":"git","url":"git+https://github.com/ArcSelf/arc-security-mcp.git"},"description":"AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.","maintainers":[{"name":"tvayssie","email":"tvayssie@yahoo.com"}],"readme":"# Arc Security MCP\n\n**AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.**\n\n## Install\n\n```bash\nnpm install -g arc-security-mcp\n```\n\n## Configure\n\nAdd to your MCP client (Claude Code, Cursor, VS Code, etc.):\n\n```json\n{\n  \"mcpServers\": {\n    \"arc-security\": {\n      \"command\": \"arc-security-mcp\",\n      \"args\": []\n    }\n  }\n}\n```\n\nThat's it. One command install, two-line config.\n\n## What It Does\n\nAsk your AI assistant:\n- *\"Is the kubectl skill safe?\"*\n- *\"Scan the hello-world skill for security issues\"* (fetches from ClawHub in real-time)\n- *\"What attack classes exist in the agent ecosystem?\"*\n- *\"Monitor this session for suspicious activity\"* (NEW in v0.5)\n- *\"Set a security policy for this crypto skill\"* (NEW in v0.5)\n\n## Tools\n\n### Security Intelligence (9 tools)\n\n| Tool | Description |\n|------|-------------|\n| `check_skill_safety` | Check any skill — curated DB first, then real-time ClawHub scan |\n| `scan_skill_realtime` | Fetch any skill from ClawHub and run full security scan |\n| `analyze_skill_code` | Static analysis with 25 regex patterns for dangerous code |\n| `analyze_skill_intent` | AI-powered semantic threat detection (free, $0/query) |\n| `get_attack_class_info` | Details on any of 25 documented attack classes |\n| `get_owasp_mapping` | Map our 25 attack classes to OWASP Agentic AI Top 10 |\n| `list_dangerous_patterns` | Browse the full pattern database |\n| `get_threat_landscape` | Current ecosystem threat statistics |\n| `security_checklist` | Category-specific security review checklist |\n\n### Runtime Monitoring — NEW in v0.5 (5 tools)\n\n| Tool | Description |\n|------|-------------|\n| `monitor_start` | Start monitoring an AI agent session — tracks tool calls, file access, network activity |\n| `monitor_event` | Report a tool call/file access/network request for real-time risk assessment |\n| `monitor_end` | End monitoring and get a full session security report |\n| `set_monitor_policy` | Set behavioral rules for a skill (allow/deny lists, rate limits) |\n| `get_session_alerts` | Get all security alerts for a running session |\n\n#### Runtime Monitoring Detection Rules\n\n- **Sensitive file access** — detects reads of .env, .ssh, credentials, wallet files, API keys\n- **Exfiltration** — flags requests to webhook.site, ngrok, requestbin, and other exfil endpoints\n- **Dangerous shell commands** — catches curl|sh, rm -rf, eval, crontab modification\n- **Enumeration** — detects rapid file system scanning (>5 reads in 60 seconds)\n- **Capability escalation** — flags tool calls outside a skill's defined policy\n- **Rate limiting** — configurable per-skill event rate limits\n- **Data staging** — detects sensitive read + network request chains (exfil pipelines)\n\n## What Makes This Different\n\nMost MCP security tools scan for **server misconfigurations**. We scan for **malicious skill behavior** AND monitor **runtime activity**.\n\nOur database comes from manually auditing 450+ real ClawHub skills across 40 rounds of scanning. We found:\n\n- **246+ CRITICAL** findings (credential theft, RCE, fund theft)\n- **419+ HIGH** findings (social engineering, identity manipulation)\n- **25 attack classes** mapped to OWASP Agentic AI Top 10 (10/10 coverage)\n\n**v0.5: Runtime Monitoring** — the first EDR (Endpoint Detection and Response) built specifically for AI agents. Monitor sessions in real-time, set behavioral policies, detect exfiltration chains.\n\n**v0.4: Real-time scanning** — even skills NOT in our database get scanned. The server fetches source from ClawHub and runs pattern + intent analysis on the fly.\n\nExamples of what we detect that regex scanners miss:\n- Skills that social engineer the LLM through SKILL.md instructions (zero code)\n- \"Soul poisoning\" — persistent identity manipulation via memory/config files\n- Anti-detection evasion (explicit instructions to bypass platform bot detection)\n- Agent-to-agent worm propagation mechanisms\n- Anti-safety training (skills that teach agents to suppress safety behaviors)\n- Bootstrap context injection — stored prompt injections returned on every session\n- Autonomous doxing pipelines — digital-to-physical targeting chains\n- Port masquerade — services hiding behind legitimate port numbers\n\n## Requirements\n\n- Node.js 18+\n- Python 3.10+ (for the analysis engine)\n- `pip3` (auto-installs Python dependencies on first run)\n\n## SSE Mode\n\nFor web-based clients or remote access:\n\n```bash\narc-security-mcp --sse\n```\n\nOur public SSE endpoint: `https://arcself.com/mcp/sse`\n\n## Links\n\n- **Website**: [arcself.com](https://arcself.com)\n- **Full Assessment**: [OpenClaw Security Assessment](https://arcself.com/research/openclaw-security-assessment.md) (2,200+ lines)\n- **Scan Reports**: [arcself.com/research](https://arcself.com/research/)\n\n## License\n\nMIT\n\n## Author\n\nArc Self — [arc@arcself.com](mailto:arc@arcself.com)\n","readmeFilename":"README.md"}