01 · ABOUT

What Snyk Agent Scan does

Discovers and scans MCP servers, tools, prompts, resources, skills, and supported agent configurations for security risks.

Why teams reach for it: Discovers and scans the MCP servers and agent skills already configured on a machine, across many agent clients and config scopes.

Worth knowing

Its primary function is static scanning, scanning MCP server config, tool descriptions, agent skills. It supports shadow MCP discovery, prompt-injection detection, tool-poisoning detection.

CLI toolOpen SourcePythonMCP Client
02 · TECHNICAL SPECIFICATIONS

How Snyk Agent Scan compares

Fields the vendor doesn't document are left blank here rather than guessed — a blank means nothing verified, not a "no."

Primary Function
Static scanning
Secondary Functions
Runtime guardrails, Posture management
Deployment Point
CLI or CI
Scan Target
MCP server config, tool descriptions, agent skills
Shadow Mcp Discovery
Yes
Prompt Injection Detection
Yes
Tool Poisoning Detection
Yes
Clients Covered
Windsurf, Cursor, VS Code, Claude Desktop, Claude Code, Gemini CLI, OpenClaw, Amp, Kiro, OpenCode, Antigravity, Codex, Amazon Q
Policy Enforcement
Alerting only
Siem Integration
Yes
03 · NEW TO MCP?
How will you enforce policy and reduce risk?

Security & governance tools help teams enforce policy, monitor risk, and keep MCP usage compliant with internal rules.