MCP & AI AGENT RUNTIME SECURITY PERIMETERLIVE HTTP TELEMETRY · ZERO MOCKS

Harden MCP endpoints and autonomous tool execution.

Inspect /.well-known/mcp.json discovery manifests, tool-call permission boundaries, prompt-injection surfaces, and secret redaction guardrails before production release.

Instant Domain Inspection~1.8s Live Probe

Instant report:

Unauthenticated Agent Surfaces

71.4%

Missing schema pinning or egress rate-limiting

Firewall Remediation Pack

£99 one-time

Includes copy-paste remediation artifacts & CI gate

Live Diagnostic · supabase.com

Inspect Report

UNPINNED MCP SCHEMA68/100 (D)

Runtime perimeter probe detected missing /.well-known/mcp.json schema signatures and unguarded tool-call egress boundaries.

/.well-known/mcp.json Runtime Security PolicyREADY TO MERGE

{
  "schemaVersion": "2026-10",
  "serverName": "agentguard-verified-perimeter",
  "securityPolicy": {
    "requireSignedToolSchemas": true,
    "blockDestructiveShellWithoutApproval": true,
    "redactEnvSecretsInStdout": true
  }
}

Inspect supabase.com Report

LIVE HTTP TELEMETRY LEDGER

Verified AgentGuard Domain Index

Domain	Segment	Perimeter Score	Primary Diagnostic Signal	Report
betterstack.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
carrd.co	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
cleanclip.cc	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
documenso.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
dub.sh	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
gojiberry.ai	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
hypefury.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
jina.ai	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
kiwidesk.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
lemonsqueezy.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
literalai.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
memberful.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
outseta.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
paddle.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
panelbear.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect
photopea.com	B2B SaaS	26/100(F)	No /.well-known/mcp.json discovery policy + unpinned tool schemas	Inspect

VERIFICATION ARCHITECTURE

Built for deterministic engineering verification.

Every AgentGuard scan executes real HTTP requests against your production edge and compiles drop-in remediation code in a single pass.

Inspect supabase.com Full Dossier →

PHASE 01

MCP 2026 Specification

MCP Manifest & Endpoint Discovery

Probes /.well-known/mcp.json, OpenAPI tool specs, and CORS origins to detect exposed agent execution endpoints.

PHASE 02

OWASP Top 10 for LLM Apps

Indirect Prompt-Injection & Egress Audit

Evaluates tool-call parameter validation, SSRF boundaries, and credential-leakage vectors across agent workflows.

PHASE 03

CI/CD SARIF & Policy Bundle

Runtime Policy & CI Gate Generation

Outputs signed mcp-policy.json rules and GitHub Actions verification gates for zero-regression deployments.