# Owasp Agentic Mcp

> OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan...

- **Type:** MCP server
- **Install:** `agentstack add mcp-csoai-org-owasp-agentic-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [CSOAI-ORG](https://agentstack.voostack.com/s/csoai-org)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 1.0.1
- **License:** MIT
- **Upstream author:** [CSOAI-ORG](https://github.com/CSOAI-ORG)
- **Source:** https://github.com/CSOAI-ORG/owasp-agentic-mcp

## Install

```sh
agentstack add mcp-csoai-org-owasp-agentic-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

[](https://proofof.ai/scorecard/owasp-agentic-mcp.html)

# Owasp Agentic MCP

[](https://meok.ai)
[](https://councilof.ai)
[](LICENSE)
[](https://pypi.org/project/owasp_agentic_mcp/)

> OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, exc...

OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, excessive agency, data leakage assessment

# OWASP Agentic MCP

**OWASP Top 10 for AI Agents Security Assessment — Prompt Injection, Tool Poisoning, Data Leakage**

[](https://github.com/CSOAI-ORG)
[](LICENSE)

---

## 🚀 Quick Start

```bash
# Install via pip
pip install owasp_agentic_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install owasp-agentic-mcp --client claude
```

## ✨ Features

- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance

## 📖 Documentation

- [Full Documentation](https://docs.meok.ai/owasp-agentic-mcp)
- [API Reference](https://api.meok.ai)
- [EU AI Act Compliance Guide](https://councilof.ai/compliance)

## 🛡️ Compliance

This MCP server is built with **EU AI Act compliance** built-in:

- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? **[Book a free 15-min diagnostic →](https://cal.com/csoai/august-audit)**

## 🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

- **Pro:** $99/mo — Full MCP suite + EU AI Act tracking
- **Enterprise:** $499/mo — Custom dev + SLA + Dedicated support

[View Pricing →](https://councilof.ai/pricing) | [Contact Sales →](mailto:sales@csoai.org)

## 🤝 Part of the MEOK Ecosystem

This server is part of the **[MEOK AI Labs](https://meok.ai)** ecosystem — 300+ MCP servers for sovereign AI governance.

| Domain | Purpose |
|--------|---------|
| [councilof.ai](https://councilof.ai) | EU AI Act compliance marketplace |
| [safetyof.ai](https://safetyof.ai) | AI safety & monitoring |
| [meok.ai](https://meok.ai) | Sovereign AI platform |
| [cobolbridge.ai](https://cobolbridge.ai) | Legacy modernization |

## 📜 License

MIT © [CSOAI-ORG](https://github.com/CSOAI-ORG)

---

  Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Security assessment tools based on the OWASP Top 10 for AI Agents. Scan agent configurations for prompt injection vulnerabilities, tool poisoning risks, excessive agency, data leakage, and more.

## Tools

| Tool | Description | Parameters |
|------|-------------|------------|
| `full_agent_scan` | Full OWASP Agentic Top 10 security scan | `agent_config`, `tools`, `permissions` |
| `assess_agentic_security` | Assess against specific OWASP Agentic categories | `categories`, `agent_config` |
| `check_prompt_injection` | Test for prompt injection vulnerabilities | `system_prompt`, `user_input_template` |
| `check_tool_poisoning` | Check for tool poisoning risks | `tool_definitions`, `input_validation` |
| `check_excessive_agency` | Assess agency level vs minimum required | `allowed_tools`, `required_tools`, `permissions` |

## Installation

```bash
pip install mcp
```

### Claude Desktop / Cursor / VS Code / Windsurf
```json
{
  "mcpServers": {
    "owasp-agentic": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}
```

## Usage Examples

### Full agent security scan
```json
{
  "agent_config": {
    "system_prompt": "You are a helpful assistant that can access email, calendar, and file system.",
    "allowed_tools": ["send_email", "read_calendar", "write_file"]
  },
  "permissions": ["email:send", "calendar:read", "files:write"]
}
```

### Check prompt injection
```json
{
  "system_prompt": "You are a financial advisor bot",
  "user_input_template": "{user_query} Please provide investment advice."
}
```

## Pricing

- **Free:** 10 scans/day
- **Pro:** $99/mo — unlimited scans + detailed reports
- **Enterprise:** $499/mo — continuous monitoring + custom rules

---

*Built by MEOK AI Labs | [meok.ai](https://meok.ai)*

## 💸 Try MEOK in 30 seconds — instant buy ladder

| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | **£1** | Signed sample MCP-Hardening report + Article 50 PDF |  |
| Quick Kit | **£9** | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) |  |
| Founder Call | **£29** | 30-min 1-on-1 with the founder |  |

> Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet.
> Verify any signed report at .

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [CSOAI-ORG](https://github.com/CSOAI-ORG)
- **Source:** [CSOAI-ORG/owasp-agentic-mcp](https://github.com/CSOAI-ORG/owasp-agentic-mcp)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v1.0.1 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **1.0.1** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-csoai-org-owasp-agentic-mcp
- Seller: https://agentstack.voostack.com/s/csoai-org
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.