Free · in your browser · declared surface only

See what your AI agents can actually reach.

Inventory the models, MCP servers, tools and scopes your agent trusts, with known-exploited components flagged.

A claude_desktop_config.json-style MCP config or an npm lockfile, max 2 MB. Secrets are redacted in memory and nothing from your upload is stored.

No scanner to install. Standards-based CycloneDX output you can keep.

Get the full picture for your domain

Free recon check of your external footprint: headers, TLS, DNS, subdomains and CVE signals. Your report and a PDF summary, sent to your work email on that domain.

Free External Security Check

What it does

  • Inventories the declared surface of your agent: the host model, MCP servers, tools, scopes and data connectors your config trusts.
  • For a lockfile, flags components carrying known-exploited (CISA KEV) or high-likelihood (EPSS) vulnerabilities, as of our latest published dataset (not a real-time feed).
  • Surfaces configuration worth a review: auto-approved tools, servers that hold a credential, and the tool-description surface.
  • Returns a CycloneDX document you can share with your team or auditor.

What it does not do

  • Discover shadow or runtime-added servers. It reads what you have configured; runtime discovery needs instrumentation inside your environment.
  • Test for injection. It flags where an injection surface exists, not whether a path is exploitable.
  • Replace a signed report. It is a starting map. Certified, human-signed reports are a separate CyberOrbit engagement.

Frequently asked questions

What is an Agentic SBOM?

A bill of materials for an AI agent: the models, MCP servers, tools, scopes and data connectors it is configured to reach, in the standards-based CycloneDX format so auditors and tooling recognise it. It maps the declared surface of what your agent trusts.

Does this test my agent for prompt injection?

No. This check flags where an injection surface exists. It does not run an injection test or prove a path is exploitable. The independent, signed injection test is a separate CyberOrbit engagement we are building toward.

Is this a complete inventory?

No. It reads the declared surface (what you have configured). It does not discover shadow or runtime-added servers, which would need instrumentation inside your environment. It is a starting map, not a complete picture.