Esta página se muestra en inglés. Una traducción al español está en curso.
ScriptsMay 12, 2026·2 min de lectura

AI-Infra-Guard — Scan MCP Servers and AI Stacks

AI-Infra-Guard runs a web UI + scanners that assess MCP servers, agent skills, and AI infra components for security risks, CVEs, and jailbreak exposure.

Listo para agents

Este activo puede ser leído e instalado directamente por agents

TokRepo expone un comando CLI universal, contrato de instalación, metadata JSON, plan según adaptador y contenido raw para que los agents evalúen compatibilidad, riesgo y próximos pasos.

Stage only · 29/100Stage only
Superficie agent
Cualquier agent MCP/CLI
Tipo
Script
Instalación
Single
Confianza
Confianza: Established
Entrada
docker-compose.images.yml
Comando CLI universal
npx tokrepo install 9f00bc44-9576-4392-a4d5-1b6ba3fdbf31
Introducción

AI-Infra-Guard runs a web UI + scanners that assess MCP servers, agent skills, and AI infra components for security risks, CVEs, and jailbreak exposure.

  • Best for: security reviews for AI agent stacks: MCP servers, skills, and local AI services
  • Works with: Docker 20.10+, Docker Compose, local or staged environments (no public exposure recommended)
  • Setup time: 30–90 minutes

Practical Notes

  • Data point: README lists baseline resources: 4GB+ RAM and 10GB+ disk.
  • Data point: the default UI address is http://localhost:8088.

Pattern: scan before you connect

For MCP servers and agent skills, scan before you wire them into your agent runtime:

  • remote URL scan for third-party repos,
  • source scan for internal forks,
  • and keep an allowlist of approved servers.

Deployment note

The README notes the project lacks an authentication mechanism and should not be deployed on public networks. Use a local/staging environment and restrict access.

FAQ

Q: Is it open-source? A: Yes. The repo is Apache-2.0 licensed.

Q: Can it scan MCP servers? A: Yes. The README lists MCP server & agent skills scanning capabilities.

Q: Is it safe to expose publicly? A: The README warns it lacks auth; keep it off public networks.

🙏

Fuente y agradecimientos

Source: https://github.com/Tencent/AI-Infra-Guard > License: Apache-2.0 > GitHub stars: 3,657 · forks: 363

Discusión

Inicia sesión para unirte a la discusión.
Aún no hay comentarios. Sé el primero en compartir tus ideas.

Activos relacionados