Open source

Batesian is a command-line scanner for MCP and A2A servers. It sends real protocol traffic at the target and sorts what comes back into confirmed exploits and risk indicators.

What it looks at:

• OAuth tokens, scopes and client registration
• Agent cards and signing
• Isolation between tasks, sessions and tenants
• SSRF through push-notification callbacks
• Cache scoping on MCP responses
• Tool and manifest integrity

$ go install github.com/calbebop/batesian/cmd/batesian@latest
$ batesian rules --protocol mcp --severity critical,high
$ batesian scan --target https://agent.example.com --dry-run
$ batesian scan --target https://agent.example.com --output sarif

54 rules on main, 48 in v1.8.1. Only scan servers you're allowed to test.

github.com/calbebop/batesian →