Mythos Agent

Open-source AI security agent: SAST, DAST, and policy-as-code.

Connector by mythos-agent · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 46

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/mythos-agent-mythos-agent

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools: 10 read · 1 write · 0 delete
Secrets: None asked for
Install scripts: Not scanned yet
Runs as: Node.js package

Tools by what they do 11

Read from the source code; the running server may list different tools.

Read 10 · Look things up without changing anything.

find_ast_pattern
find_callees
find_callers
find_unprotected_endpoints
get_security_overview
list_endpoints
list_files
list_functions
read_file
search_code

Write 1 · Create, change, send or run things.

trace_call_path

Files it touches

Any path the agent passes to its tools

Tools (11)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

find_ast_pattern
Find code matching a tree-sitter AST node kind across the project, optionally filtered by regex predicates against each match's text. Use this for variant-analysis-style searches where the "shape" of the code matters (e.g. `new RegExp(...)` calls, `function_declaration` nodes accepting a specific parameter name) — not just the surface text. JS/TS only at present. Pass `kind` as a single string or an array of strings (union match).
find_callees
Find all functions called by a specific function. Useful for understanding what a function does.
find_callers
Find all functions that call a specific function. Useful for tracing data flow and understanding impact.
find_unprotected_endpoints
Find API endpoints that lack authentication middleware but handle sensitive operations.
get_security_overview
Get an overview of the codebase security posture: endpoint auth coverage, function count, tech stack.
list_endpoints
List all API endpoints (HTTP routes) discovered in the codebase. Shows method, path, auth status, and risk level.
list_files
List files in a directory of the project.
list_functions
List all functions/methods in the codebase or a specific file. Returns name, file, line, params, exported status.
read_file
Read the contents of a file in the project. Returns the file content with line numbers.
search_code
Search for a pattern across all files in the project. Returns matching lines with file paths and line numbers.
trace_call_path
Trace the call path between two functions. Shows how data/control flows from one function to another.

Signals

Stars: 46
Forks: 13
Open issues: 1
Contributors: 3
Last commit: May 23, 2026 (5 months ago)
Last release: May 20, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.mythos-agent/mythos-agent
Version: 4.0.1
Auth: No auth
Packages: npm mythos-agent
License: MIT
Repository: github.com/mythos-agent/mythos-agent
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

Cite this page

Mythos Agent MCP server. Agent Mart. https://agentmart.dev/connectors/mythos-agent-mythos-agent (last updated 2026-10-24)