agent-audit-kit

Off-the-shelf

MCP-native agent-config auditing across a broad rule catalog.

What it scans

Agent and MCP configuration, evaluated with 215 rules across 11 categories covering the OWASP Agentic Top 10, the MCP Top 10, and common compliance frameworks.

What it catches

Agent-configuration issues framed against the OWASP Agentic Top 10 and MCP Top 10.
MCP protocol issues that the other config scanners don't cover — it is deliberately complementary.

Source and provenance

Nerlo pins and publishes each scanner's provenance so you can verify it yourself. Every scan surfaces the source, version, and install command in its report.

Kind: Off-the-shelf
Source channel: pypi (hash-pinned requirements)
Pinned version: 0.3.26
License: MIT
Source URL: https://pypi.org/project/agent-audit-kit/0.3.26/