agent-audit-kit/CITATION.cff at main · sattyamjjain/agent-audit-kit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
# Citation metadata for AgentAuditKit.
#
# GitHub renders this as the "Cite this repository" widget. `preferred-citation`
# points at The State of MCP Security, 2026 rather than the software, because that
# report is what people actually cite — it carries the measurements. The two
# identities are kept deliberately consistent: the report's own
# "How to cite this report" section states the same version, date and corpus size,
# so a reader cannot get two different answers depending on where they looked.
#
# Bump `version` and `date-released` with each release; bump the report's
# `preferred-citation.version` only when a number in the report changes.
cff-version: 1.2.0
message: >-
  If you use AgentAuditKit or cite its measurements, please cite the
  State of MCP Security 2026 report (see preferred-citation).
title: "AgentAuditKit"
abstract: >-
  Security scanner for MCP-connected AI agent pipelines. Offline and
  deterministic: the default scan path makes zero network calls and the same
  input always yields the same finding set, with no model in the loop.
type: software
authors:
  - family-names: "Jain"
    given-names: "Sattyam"
    alias: "sattyamjjain"
repository-code: "https://github.com/sattyamjjain/agent-audit-kit"
url: "https://github.com/sattyamjjain/agent-audit-kit"
license: MIT
version: "0.3.83"
date-released: "2026-08-17"
keywords:
  - model-context-protocol
  - mcp
  - ai-agent-security
  - static-analysis
  - supply-chain-security
  - owasp-agentic
preferred-citation:
  type: report
  title: "The State of MCP Security, 2026"
  authors:
    - family-names: "Jain"
      given-names: "Sattyam"
      alias: "sattyamjjain"
  institution:
    name: "AgentAuditKit"
  year: 2026
  month: 8
  version: "1.0"
  license: MIT
  url: "https://github.com/sattyamjjain/agent-audit-kit/blob/main/research/state-of-mcp-2026/REPORT.md"
  abstract: >-
    A static scan of 2,303 distinct public Model Context Protocol server
    configurations, collected 2026-07-26 from GitHub-crawled .mcp.json files and
    the official MCP Registry. Findings include 0 of 2,303 configs serving RFC 9728
    Protected Resource Metadata discovery, 52.3% (1,205) declaring a remote server
    with no authentication, and 100% (421 of 421) of inline-auth remote configs
    hardcoding a static credential. Offline and deterministic; reproducible from the
    committed corpus manifest with `make report`.