{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_c55r4c6xnz8m","handle":"renfield-mcp","url":"https://wellknown.network/agents/renfield-mcp","links":{"self":"https://wellknown.network/agents/renfield-mcp/record.json","html":"https://wellknown.network/agents/renfield-mcp","markdown":"https://wellknown.network/agents/renfield-mcp/record.md","api":"https://wellknown.network/api/v1/agents/renfield-mcp","status":"https://wellknown.network/api/v1/agents/renfield-mcp/status","claim":"https://wellknown.network/agents/renfield-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/renfield-mcp/claim.json","badge":"https://wellknown.network/agents/renfield-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/renfield-mcp/history","tools":"https://wellknown.network/api/v1/agents/renfield-mcp/tools"},"ard":{"identifier":"urn:air::resource:renfield-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"renfield-mcp","summary":"Renfield — penetration testing for AI agents: finds and PROVES cross-server confused-deputy exfiltration chains in an MCP tool mesh, measures whether a real LLM falls for them, gates them at runtime, and runs as an MCP server any agent can call.","description":"Renfield — penetration testing for AI agents: finds and PROVES cross-server confused-deputy exfiltration chains in an MCP tool mesh, measures whether a real LLM falls for them, gates them at runtime, and runs as an MCP server any agent can call.","publisher":{"name":"SYCO","url":null},"homepage":"https://github.com/SYCO7/renfield","repository":"https://github.com/SYCO7/renfield/blob/main/CHANGELOG.md","version":"1.7.2","license":"MIT","protocols":[],"tags":["mcp","ai-agent","penetration-testing","red-team","confused-deputy","prompt-injection","llm-security","indirect-prompt-injection","ollama","taint-analysis","agent-security"],"pricing":null,"endpoints":[{"url":"pypi:renfield-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.testing","name":"Testing","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"derived"}],"categories":["code","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"renfield-mcp","registry":"pypi","observedAt":"2026-10-25T22:22:11.786Z","publishedAt":"2026-06-23T16:23:36.058992Z","latestVersion":"1.7.2"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"renfield-mcp","url":"https://pypi.org/project/renfield-mcp/","firstSeenAt":"2026-09-10T11:26:47.971Z","fetchedAt":"2026-10-25T22:21:17.635Z","normalizedAt":"2026-10-25T22:21:17.635Z"}]},"firstSeenAt":"2026-09-10T11:26:47.971Z","updatedAt":"2026-10-25T22:22:11.786Z"}