Interactive practitioner tools for MCP and agentic AI security, aligned with the CIS MCP Server Benchmark v1.0.0.
These tools help practitioners think through AI system risk, tool access, autonomy, and control mapping. They are simplified educational aids, not formal audits or certifications.
Answer a set of questions about your AI system and generate a basic risk profile covering exposure, data sensitivity, tool access, control gaps, and key recommended controls.
Select the tools an MCP-connected AI agent can access and see how risk changes across authorization scope, tool type, data sensitivity, and action impact. Controls point to the related CIS MCP Server Benchmark section.
An interactive checklist organized around the 10 domains of the CIS MCP Server Benchmark v1.0.0, from governance and transport to supply chain and isolation. Plain-language items with section references. Track your coverage and copy the result.
Pick a confused-deputy attack against an MCP-connected agent, then toggle controls (instruction isolation, human approval, per-user authorization, least-privilege scope, parameter validation) to watch exactly where each attack gets blocked.
Tools are designed for security practitioners, developers, and AI adopters, not compliance officers. The goal is actionable thinking, not checkbox completion.
All tools run entirely in your browser. No data is sent anywhere, no account required, no session is stored.
Tools draw on the CIS MCP Server Benchmark v1.0.0, the CIS Controls AI Companion Guides, OWASP LLM Top 10, and NIST AI RMF, simplified and explained in plain language. Benchmark-aligned tools cite section numbers so you can go to the full guidance.