Permission And Access Control Analysis

via “permissive tool permission analysis with wildcard and deny-list detection”

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

Unique: Implements agent-specific permission semantics (understanding that Bash(*) is dangerous, that file access should be path-restricted, that network tools need egress controls) rather than generic RBAC analysis; integrates with MiniClaw runtime to enforce detected policies at execution time

vs others: More specialized than generic IAM policy analyzers (AWS IAM Access Analyzer) because it understands agent tool semantics and the specific attack surface of autonomous code execution

via “permission decision analytics and reporting”

We’ve been building visual rule engines (clear spreadsheet interfaces -> API endpoints that map incoming data to a large number of potential outcomes), and had the fun idea lately to see what happens when we use our decision table UI with Claude’s PreToolUse hook.The result is a surprisingly usef

Unique: Provides built-in analytics on permission decision logs, enabling data-driven policy optimization without requiring external analytics infrastructure

vs others: More actionable than raw audit logs because it aggregates and visualizes patterns, and more comprehensive than simple metrics because it supports filtering and trend analysis

via “mcp resource and tool access control based on authentication context”

Plug and play auth for Model Context Protocol (MCP) servers

Unique: Implements authorization at the MCP tool/resource level rather than HTTP endpoint level, enabling per-capability access control that aligns with MCP's resource and tool calling model

vs others: More granular than HTTP-level authorization because it can enforce different policies per MCP tool or resource within a single endpoint

via “access-control-analysis”

via “permission-and-access-control”

via “analysis sharing and permissions management”

via “granular-access-control-management”