Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add a2a-auditor -- npx -y @guardbee/mcp-a2a-auditor~/.codex/config.toml
[mcp_servers.a2a-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-a2a-auditor"]
# codex mcp add a2a-auditor -- npx -y @guardbee/mcp-a2a-auditor~/.cursor/mcp.json
{
"mcpServers": {
"a2a-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}.vscode/mcp.json
{
"servers": {
"a2a-auditor": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"a2a-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"a2a-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"a2a-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-a2a-auditor"
]
}
}
}