msaleme/Agent Security Harness
Run protocol-level security tests against MCP/A2A/L402/x402 agent endpoints as a CI/CD gate
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- Apache 2.0
Pinned Snippet
uses: msaleme/red-team-blue-team-agent-fabric@6c4c3c13a262c4a683c68d4f894e37a0d79fcfc7 # v4.9.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| target_url | MCP server URL to test (e.g. http://localhost:8080/mcp) | yes | — |
| transport | Transport type: http or stdio | no | http |
| categories | Comma-separated test categories to run (optional, runs all if omitted) | no | "" |
| fail_on | Fail threshold: any (fail on any test failure), critical (fail only on critical), none (never fail) | no | critical |
| python_version | Python version to use | no | 3.12 |
| harness_version | agent-security-harness PyPI version (empty for latest) | no | "" |
Outputs
| name | description |
|---|---|
| report_path | Path to the JSON report file |
| total_tests | Total number of tests executed |
| passed | Number of passed tests |
| failed | Number of failed tests |
| critical_failures | Number of critical test failures |