Mythos Agent
- 39 repo stars
- Updated May 23, 2026
- mythos-agent/mythos-agent
Runs SAST, DAST, and policy-as-code security checks over MCP so a solo builder can scan their code and running app for vulnerabilities before shipping.
About
Mythos Agent is an open-source AI security agent that runs SAST, DAST, and policy-as-code checks over MCP. A solo builder connects it to their coding agent to scan source and a running app for vulnerabilities and policy violations before shipping. It installs as an npm stdio package.
- Open-source AI security agent
- SAST and DAST scanning
- Policy-as-code enforcement
- stdio MCP via npm
Mythos Agent by the numbers
- Data as of Jul 26, 2026 (Skillselion catalog sync)
terminal
claude mcp add mythos-agent -- npx -y mythos-agentAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| repo stars | ★ 39 |
|---|---|
| Package | mythos-agent |
| Transport | STDIO |
| Auth | None |
| Last updated | May 23, 2026 |
| Repository | mythos-agent/mythos-agent ↗ |
What it does
Runs SAST, DAST, and policy-as-code security checks over MCP so a solo builder can scan their code and running app for vulnerabilities before shipping.
Who is it for?
Solo devs who want automated security scanning before shipping
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.