01 What It Does

Open source AI agent red team platform for testing MCP server security, intercepting agent traffic, and mapping vulnerabilities to OWASP frameworks.

counteragent audit

Automated security scanner for MCP server implementations. Runs modular checks against the OWASP MCP Top 10 — token exposure, privilege escalation, tool poisoning, injection, and more.

counteragent proxy

Interactive MCP traffic interceptor — "Burp Suite for MCP." Sits between client and server, intercepting JSON-RPC messages for inspection, modification, and replay.

counteragent inject

Tool poisoning & prompt injection. Planned

counteragent chain

Multi-agent attack chains. Planned

02 Install

git clone https://github.com/q-uestionable-AI/counteragent.git
cd counteragent
uv sync --group dev

Or: pip install -e .