Open Source

CLI for adversarial testing of A2A and MCP stacks. It drives concrete protocol traffic (OAuth audience/scope/DCR, push-notification callbacks, JWS card signatures, session and task boundaries) and records findings as confirmed or indicator, with SARIF for CI.

Focused on the semantics these protocols get wrong. OAuth scope and audience binding. Signed agent cards. Push callbacks that become SSRF. Task and session IDs that bleed across tenants.

$ go install github.com/calbebop/batesian/cmd/batesian@latest
$ batesian scan --target https://agent.example.com --output sarif

45 rules (19 A2A, 26 MCP), each mapped to CWE and remediation. Go, Apache 2.0. Only run against targets you own or have explicit permission to test.

→ github.com/calbebop/batesian