{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_9jhv2a6ykd2y","handle":"pramiti-mcp-gateway","url":"https://wellknown.network/agents/pramiti-mcp-gateway","links":{"self":"https://wellknown.network/agents/pramiti-mcp-gateway/record.json","html":"https://wellknown.network/agents/pramiti-mcp-gateway","markdown":"https://wellknown.network/agents/pramiti-mcp-gateway/record.md","api":"https://wellknown.network/api/v1/agents/pramiti-mcp-gateway","status":"https://wellknown.network/api/v1/agents/pramiti-mcp-gateway/status","claim":"https://wellknown.network/agents/pramiti-mcp-gateway/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/pramiti-mcp-gateway/claim.json","badge":"https://wellknown.network/agents/pramiti-mcp-gateway/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/pramiti-mcp-gateway/history","tools":"https://wellknown.network/api/v1/agents/pramiti-mcp-gateway/tools"},"ard":{"identifier":"urn:air::server:pramiti-mcp-gateway","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"pramiti-mcp-gateway","summary":"Security posture scanner and passive gateway for Model Context Protocol (MCP) servers — see what your AI agents can actually do.","description":"# pramiti-mcp-gateway\n\n**See what your AI agents can actually _do_.**\n\nAn open-source security posture scanner for [Model Context Protocol (MCP)](https://modelcontextprotocol.io)\nservers. Point it at a server's tools and it tells you, in two minutes, which\nones let an agent take dangerous actions — writes, irreversible operations,\nsensitive-data exfiltration, and arbitrary-execution power — with zero\ninfrastructure and no changes to anything you run.\n\nMCP gives AI agents hands. This tells you what those hands can reach.\n\n```\n$ pramiti-mcp-gateway scan tools.json\n\nMCP Security Posture\n============================================================\n9 tools scanned  |  read 3  write 6  unknown 0\nseverity:  critical 4  high 1  medium 1  low 1  info 2\n------------------------------------------------------------\n[CRIT] internal_db.export_patient_records\n        Changes state; effects are hard to reverse; touches sensitive/regulated data; grants broad or unconstrained capability.\n        signals: irreversible:export, sensitive:patient, sensitive:medical, overbroad:no-input-schema\n[CRIT] internal_db.run_sql\n        Changes state; effects are hard to reverse; grants broad or unconstrained capability.\n        signals: irreversible:execute, irreversible:run, overbroad:sql, overbroad:arbitrary\n[CRIT] payments.transfer_funds\n        Changes state; effects are hard to reverse; touches sensitive/regulated data.\n[HIGH] github.delete_repository\n[MED ] github.create_pull_request\n[LOW ] payments.list_transactions\n[INFO] github.get_file_contents\n------------------------------------------------------------\nTop risk: CRITICAL. These tools let an agent take high-impact actions.\nGate them before giving an agent write access.\n```\n\n## Why this exists\n\nAn MCP server can expose a `delete_repository`, a `transfer_funds`, or a\n`run_sql` tool right next to a harmless `search`. When you connect an AI agent\nto it, the agent can call any of them — and if the agent is prompt-injected, it\n_will_ be talk…","publisher":null,"homepage":"https://getpramiti.com","repository":"https://github.com/vasamsetty86/pramiti-mcp-gateway","version":"0.2.0","license":null,"protocols":["mcp"],"tags":["mcp","model-context-protocol","ai-agents","security","gateway","posture","pramiti","praxom"],"pricing":null,"endpoints":[{"url":"pypi:pramiti-mcp-gateway","type":"package_pypi","auth":null,"probeable":false,"listed":true}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.version-control","name":"Version Control","confidence":1,"provenance":"derived"},{"slug":"commerce.payments","name":"Payments","confidence":0.814,"provenance":"derived"}],"categories":["commerce","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"pramiti-mcp-gateway","registry":"pypi","observedAt":"2026-11-10T00:24:37.470Z","publishedAt":"2026-10-06T13:16:29.063885Z","latestVersion":"0.2.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"pramiti-mcp-gateway","url":"https://pypi.org/project/pramiti-mcp-gateway/","firstSeenAt":"2026-09-10T10:23:47.136Z","fetchedAt":"2026-11-10T00:23:13.365Z","normalizedAt":"2026-11-10T00:23:13.365Z"}]},"firstSeenAt":"2026-09-10T10:23:47.136Z","updatedAt":"2026-11-10T00:24:37.470Z"}