# Aguara Watch — AI Agent Security Scanner & Observatory

> Scan AI agent skills and MCP servers for security vulnerabilities. 173+ detection rules, 13 threat categories. Free, open source, runs in your browser.

## Online Scanner

Aguara Watch includes a free browser-based security scanner at https://watch.aguarascan.com. It uses WebAssembly to run the Aguara scanner locally — no code is uploaded, no account required. You can scan by GitHub URL (public or private repositories), paste content, or drag and drop files. Results include an A-F grade, severity breakdown, and downloadable JSON/HTML reports.

## Observatory

Aguara Watch also operates a continuous security observatory that crawls 7 public AI agent skill registries daily, scans every discovered skill, and publishes results as open data.

## Key Data

- 7 registries monitored: Skills.sh, ClawHub, PulseMCP, mcp.so, LobeHub, Smithery, Glama
- 46,000+ skills and MCP servers scanned daily
- 13 threat categories, 173+ detection rules
- Grades A-F based on 100-point scoring (CRITICAL -25, HIGH -15, MEDIUM -8)
- Full scan history with first-seen/last-seen timestamps

## API Endpoints

- GET /api/v1/stats.json — Global statistics (totals, grade distribution, severity distribution)
- GET /api/v1/registries.json — List of all monitored registries
- GET /api/v1/skills/{registry}/{slug}.json — Individual skill security report
- GET /api/v1/categories.json — Finding counts by threat category
- GET /api/v1/trends/weekly.json — Weekly trend data

## Datasets (CSV)

- /api/v1/datasets/findings.csv — All security findings
- /api/v1/datasets/scores.csv — All skill scores and grades
- /api/v1/datasets/skills.csv — Skill metadata

## Related Projects

- Aguara Scanner: https://aguarascan.com — Deterministic security scanner CLI for AI agent skills and MCP servers
- Aguara MCP: https://github.com/garagon/aguara-mcp — MCP server for on-demand security scanning inside AI agents
- Oktsec: https://oktsec.com — Runtime security for AI agents
- Source code: https://github.com/garagon/aguara-observatory