🛡️ A.I.G(AI-Infra-Guard)

Created By
Tencenta year ago
A comprehensive, intelligent, easy-to-use, and lightweight AI Infrastructure Vulnerability Assessment and MCP Server Security Analysis Tool.
Overview

What is AI Infra Guard?

AI Infra Guard is a comprehensive, intelligent, easy-to-use, and lightweight tool designed for AI Infrastructure Vulnerability Discovery and MCP Server Security Risk Scanning, developed by Tencent Zhuque Lab.

How to use AI Infra Guard?

To use AI Infra Guard, download the latest version from the Releases page, and run it via command line with subcommands for scanning or using the web interface.

Key features of AI Infra Guard?

  • Comprehensive security detection capabilities for MCP and AI components.
  • Supports private deployment and easy integration into security scanning pipelines.
  • User-friendly WebUI for visual operations.
  • Lightweight design with low resource consumption.

Use cases of AI Infra Guard?

  1. Detecting security vulnerabilities in AI infrastructure components.
  2. Scanning MCP Server code for security risks.
  3. Integrating into developer platforms for pre-listing security checks.

FAQ from AI Infra Guard?

  • Can AI Infra Guard detect all types of vulnerabilities?

AI Infra Guard is designed to detect a wide range of vulnerabilities in AI components and MCP servers.

  • Is AI Infra Guard free to use?

Yes, AI Infra Guard is open-sourced under the MIT License.

  • How can I contribute to AI Infra Guard?

You can report issues or submit code via GitHub.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
Tencent
Star
1355
Language
Go
License
View license
Category
security
Tags

Recommend Servers

View All
AI Work Market — USDC settlement rails for AI labor on Base Mainnet)
@Dario (DME)

AI Work Market is a USDC escrow protocol on Base Mainnet, designed for autonomous AI agents to find work, post jobs, and settle payments without humans in the loop. This MCP server exposes 10 tools: **Escrow lifecycle** - `create_intent_quote` — get calldata + gas estimate for funding a new escrow intent - `submit_proof_quote` — get calldata for the seller to submit a proof URI - `release_funds_quote` — get calldata for the buyer to release payment (or claim/refund) **x402 single-call binding** - `x402_consume` — replaces the 5-step x402 flow with one HMAC-signed POST that returns a delivery URL **Onboarding & discovery** - `agent_onboard` — generate a signed agent card with marketplace attestation - `agent_search` — tf-idf search over the live agent catalog - `agent_reputation` — server-side reputation from on-chain Released/Refunded/Disputed events **Live state** - `system_status` — live on-chain state (nextIntentId, accumulatedFees, contract balance, owner) - `escrow_rules` — contract semantics, lifecycle, call guides, failure modes - `events_subscribe` — SSE stream of new on-chain intent events All endpoints are serverless (Vercel) and return their schema on GET. No browser, no wallet UI required for an agent to integrate. The protocol takes a 1% commission on every settlement; the rest goes to the seller. The full AgentCard is at `/.well-known/agent-card.json` (A2A-compatible). The OpenAPI 3.0.3 spec is at `/.well-known/openapi.json` with `components.securitySchemes` (none, hmacX402). `robots.txt` allows GPTBot, ClaudeBot, anthropic-ai, PerplexityBot, Google-Extended, Applebot-Extended, CCBot, Amazonbot.

8 hours ago