Agent Security Scanner
Pricing
Pay per usage
Go to Apify Store
Agent Security Scanner
Scan AI agent repos, MCP servers, and coding-agent configs for unsafe eval, shell execution, package hallucinations, prompt injection, and MCP security risks.
Agent Security Scanner
Pricing
Pay per usage
Scan AI agent repos, MCP servers, and coding-agent configs for unsafe eval, shell execution, package hallucinations, prompt injection, and MCP security risks.
You can access the Agent Security Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.
{ "openapi": "3.0.1", "info": { "version": "0.0", "x-build-id": "4fZTh8hnuK0uXMyhw" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/folkloric_morale~agent-security-scanner/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-folkloric_morale-agent-security-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/folkloric_morale~agent-security-scanner/runs": { "post": { "operationId": "runs-sync-folkloric_morale-agent-security-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/folkloric_morale~agent-security-scanner/run-sync": { "post": { "operationId": "run-sync-folkloric_morale-agent-security-scanner", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "target" ], "properties": { "target": { "title": "Target", "enum": [ "repository", "mcpServer", "agentConfig", "code" ], "type": "string", "description": "What kind of artifact should ProofLayer scan?", "default": "repository" }, "repoUrl": { "title": "Repository URL", "type": "string", "description": "Git repository URL to clone when target is repository or mcpServer." }, "branch": { "title": "Branch", "type": "string", "description": "Optional branch, tag, or ref to clone." }, "mcpConfigUrl": { "title": "MCP Config URL", "type": "string", "description": "URL returning an MCP server.json-style manifest or agent config JSON." }, "mcpConfigJson": { "title": "MCP Config JSON", "type": "object", "description": "Inline MCP manifest or AI client config JSON. Accepts either a JSON object or a JSON string." }, "sourceCode": { "title": "Source Code", "type": "string", "description": "Inline source code to scan when target is code." }, "ruleSets": { "title": "Rule Sets", "type": "array", "description": "Scanner coverage areas to include in the output metadata.", "items": { "type": "string", "enum": [ "all", "code-security", "mcp-tool-poisoning", "prompt-injection", "supply-chain", "compliance" ], "enumTitles": [ "All", "Code security", "MCP tool poisoning", "Prompt injection", "Supply chain", "Compliance" ] }, "default": [ "all" ] }, "severityThreshold": { "title": "Severity Threshold", "enum": [ "info", "low", "medium", "high", "critical" ], "type": "string", "description": "Only publish findings at or above this severity.", "default": "info" }, "includeRemediation": { "title": "Include Remediation", "type": "boolean", "description": "Include remediation guidance in dataset rows and summary output.", "default": true }, "repositoryScanMode": { "title": "Repository Scan Mode", "enum": [ "quick", "analyzer" ], "type": "string", "description": "Use quick for fast rule-based repository results. Use analyzer for deeper per-file analysis with a higher runtime cost.", "default": "quick" }, "includeTestFiles": { "title": "Include Test, Demo, and Fixture Files", "type": "boolean", "description": "Include tests, demos, benchmarks, and fixtures in repository scans. Disabled by default to reduce noisy findings from intentionally vulnerable examples.", "default": false }, "maxRepositoryFiles": { "title": "Max Repository Files", "minimum": 1, "maximum": 500, "type": "integer", "description": "Maximum number of source files to scan for repository targets. Lower values finish faster on large repositories; maximum is 500.", "default": 150 }, "perFileTimeoutSeconds": { "title": "Per-file Timeout Seconds", "minimum": 1, "maximum": 120, "type": "integer", "description": "Maximum time to spend on any single repository file before recording a scan error and moving on.", "default": 30 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } }}OpenAPI is a standard for designing and describing RESTful APIs, allowing developers to define API structure, endpoints, and data formats in a machine-readable way. It simplifies API development, integration, and documentation.
OpenAPI is effective when used with AI agents and GPTs by standardizing how these systems interact with various APIs, for reliable integrations and efficient communication.
By defining machine-readable API specifications, OpenAPI allows AI models like GPTs to understand and use varied data sources, improving accuracy. This accelerates development, reduces errors, and provides context-aware responses, making OpenAPI a core component for AI applications.
You can download the OpenAPI definitions for Agent Security Scanner from the options below:
If you’d like to learn more about how OpenAPI powers GPTs, read our blog post.
You can also check out our other API clients: