Open Source

A command-line security scanner for A2A and MCP servers, the protocols agents use to reach their tools and each other. It runs real attacks against a live endpoint and reports the auth and isolation flaws it can actually confirm, with the evidence attached.

It looks at the things that are specific to these protocols and easy to get wrong. OAuth scope and audience binding. Signed agent cards. Push-notification callbacks that turn into SSRF. Task and session IDs that bleed across tenants.

$ go install github.com/calbebop/batesian/cmd/batesian@latest
$ batesian scan --target https://agent.example.com --output sarif

30 rules so far (15 A2A, 15 MCP), each tied to a CWE and a fix. Go, Apache 2.0. It sends real attacks, so only run it against targets you're authorized to test.

→ github.com/calbebop/batesian

Rule-pack updates and release notes land in ~/devlogs tagged oss.