# BackBond Agent Scan MCP server

> Inspects MCP tool manifests and agent configurations locally to identify potential risks before tool attachment.

- Repository: https://github.com/BackBond/agent-scan
- Page: https://hostedmcp.org/servers/backbond/agent-scan
- Transport: stdio
- Stars: 1
- License: MIT
- Latest version: 0.6.3

## Install

### Claude Code

```sh
claude mcp add agent-scan -- npx -y @backbond/agent-scan
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "agent-scan": {
      "command": "npx",
      "args": [
        "-y",
        "@backbond/agent-scan"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "agent-scan": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@backbond/agent-scan"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"agent-scan","type":"stdio","command":"npx","args":["-y","@backbond/agent-scan"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "agent-scan": {
      "command": "npx",
      "args": [
        "-y",
        "@backbond/agent-scan"
      ]
    }
  }
}
```

### Codex

```sh
codex mcp add agent-scan -- npx -y @backbond/agent-scan
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.agent-scan]
command = "npx"
args = ["-y", "@backbond/agent-scan"]
```

### Gemini CLI

```sh
gemini mcp add -s user agent-scan npx -- -y @backbond/agent-scan
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "agent-scan": {
      "command": "npx",
      "args": [
        "-y",
        "@backbond/agent-scan"
      ]
    }
  }
}
```

## FAQ

### Does this scanner execute the tools it inspects?

No, it is a static-only scanner that inspects tool metadata and agent configuration without running tools or probing live agents.

### What are the possible scan results?

The scanner returns 'block' to stop automatic attachment, 'review' to require operator intervention, or 'no_blocking_finding' if no rules are triggered.