代理工具安全审计工具

cargo install agentox-cli

git clone https://github.com/CarlosLadd/AgentOx.git
cd AgentOx
cargo install --path crates/agentox-cli

# Audit any MCP server via stdio
agentox audit --stdio "npx -y @modelcontextprotocol/server-filesystem /tmp"

# Output structured JSON for CI pipelines
agentox audit --stdio "npx -y @modelcontextprotocol/server-filesystem /tmp" --format json

# Run only security checks
agentox audit --stdio "npx -y @modelcontextprotocol/server-filesystem /tmp" --only security

# Audit an HTTP/SSE endpoint
agentox audit --target "http://localhost:8080"

# Select protocol adapter explicitly
agentox audit --target "http://localhost:8080" --protocol a2a

# Enforce policy-as-code and baseline regression guard
agentox audit --stdio "npx -y @modelcontextprotocol/server-filesystem /tmp" \
  --policy agentox-policy.yaml --baseline previous-report.json

AgentOx Audit Report
Target: npx -y @modelcontextprotocol/server-filesystem /tmp
Server: filesystem v0.6.2
Protocol: 2025-11-25

[PASS] CONF-001 Initialize returns valid capabilities
[PASS] CONF-002 JSON-RPC 2.0 message structure
[PASS] CONF-003 tools/list returns valid tools
[PASS] CONF-004 Tool inputSchema is valid JSON Schema
[PASS] CONF-005 Malformed request handling
[PASS] CONF-006 Unknown method handling
[PASS] CONF-007 Error code correctness
[PASS] CONF-008 Capability negotiation
[PASS] CONF-009 Protocol version validation
[PASS] CONF-010 Initialized notification handling
[PASS] SEC-001 Prompt-injection echo safety
[PASS] SEC-002 Tool parameter boundary validation
[PASS] SEC-003 Error leakage detection
[PASS] SEC-004 Resource-exhaustion guardrail

Summary
  Total: 17, Passed: 17, Failed: 0
  Duration: 342ms

- name: Audit tool server
  run: |
    cargo install agentox-cli
    agentox audit --stdio "npx -y @modelcontextprotocol/server-filesystem /tmp" \
      --format json --no-color | tee audit-report.json

- name: Upload audit report
  uses: actions/upload-artifact@v4
  with:
    name: agentox-report
    path: audit-report.json

agentox audit --stdio "npx my-mcp-server" || {
  echo "Tool server failed audit — blocking deploy"
  exit 1
}

crates/
├── agentox-core/   # Core audit engine (embeddable library)
│   ├── client/     # Transports + adapter-backed sessions
│   ├── checks/     # Audit checks (conformance, security, behavioral)
│   ├── platform/   # Protocol adapters + canonical tool model
│   ├── policy/     # Policy-as-code + baseline regression evaluation
│   ├── protocol/   # JSON-RPC 2.0 + MCP 2025-11-25 types
│   └── report/     # Text + JSON report renderers
└── agentox-cli/    # Thin CLI wrapper (main.rs + clap)