Security & Compliance · AI agent inventory
AgentLedger
See every AI agent in your code.
A complete inventory of the AI agents that can touch your repositories: CI agents, MCP servers, agent settings and organisation-level AI apps.
$ agent-guard --help
→ AI agent register
→ Risk findings
→ SARIF report
The problem
Developers connect AI agents to repositories faster than security can track. Auditors now ask for the list.
What it does
Finds AI agents in CI, MCP configs, settings and instruction files
Flags settings that let an outsider steer an agent
Auditor-ready register in HTML, every finding mapped to the OWASP Top 10 for LLM Applications (2025)
Rates toxic combinations: outsiders able to steer an agent that holds secrets or write access
Flags remote MCP servers that send your code and context to a third party
SARIF output for code-scanning dashboards
ZIP upload in the workbench
How it works
- Scan repositories or upload a ZIP
- Review risky settings
- Export the register for audit
Works with
Runs in your CI
- uses: ./.github/actions/agent-guard
with:
path: .
fail-on: high
Your data
- Read-only token.
- Configuration is read, not code content.
- Results stay with you.
Who it's for
Questions
Why now?
Auditors have started asking for the list, and agents are being connected faster than security can track.
Does it block agents?
It inventories and flags risky permissions; MaskWall enforces.
Related
Often used with AgentLedger
MaskWall
AI data firewallUse AI. Keep your secrets. A protective layer between your company and every AI service. Keys, passwords and customer data are blocked or masked before they leave, and quietly restored in the reply.
$199–499/month (₹8,000–25,000 in India)View product → Security & CompliancePrivacyPilot
DPDP privacy compliancePrivacy compliance, made practical. Find the gaps between your website and India's DPDP Act, and get the privacy notice, data inventory and consent banner to close them. Notices are checked against GDPR, UK, US and Australian rules too.
₹2,999 per siteView product → Security & ComplianceCERT-In Ready
CERT-In compliance checkCERT-In, checked properly. Check your infrastructure against the CERT-In Directions as written: 180 days of logs held in India, synchronised time and incident reporting.
₹25,000–75,000View product →See AgentLedger on your own data
A 30-minute call. We run the product on your export, repository or document and walk you through the results.