See the connections behind each agent
Identify the skills and MCP servers used by supported agents on managed devices. Explore connected tools and application dependencies in Inventory.
MCP and skill security
See the skills and MCP servers behind your agents
Inspect skills and MCP servers for hidden instructions, see where they are in use, and investigate the actions they trigger on managed devices.
The challenge
A trusted agent can still follow untrusted instructions
Skills and MCP servers extend an agent's reach into files, tools, and external services. A risky instruction or excessive permission can turn that access into exposure.
The Repello approach
Workstation Lens links supported file findings to the agent, device, and live session. SkillCheck helps review an individual skill before adoption; Inventory adds context for MCP connections in supported custom applications.
How Repello helps
Inspect the file behind the risk
Scan supported skills and configuration files for hidden instructions, dangerous commands, broad permissions, and suspicious destinations.
Watch how agents use those connections
Review supported resource access, commands, and outbound destinations alongside the agent session and configured policy.
Locate affected devices
Connect a risky file to the managed devices where it appears so security and IT can scope the response.
What Repello gives your team
Turn a risky connection into a focused response
See where the risk exists, what the agent attempted, and whether a policy stopped a covered action.
Know what needs attention
- Connect a finding to the agent, file, and affected managed devices.
- Review risky instructions and permissions before adopting a skill.
- Focus remediation on the configurations actually present in your fleet.
Limit risky actions at runtime
- Evaluate covered agent actions against configured policy.
- Block prohibited resource access, commands, or outbound destinations at supported enforcement points.
- Check the event outcome before describing an attempt as prevented.
Frequently asked questions
What to know before deployment.
What can Repello inspect in an agent's MCP and skill setup?
On managed devices, Workstation Lens inspects supported skills, MCP servers, plugins, rules, hooks, and configuration files. It connects risky instructions, permissions, and destinations to the agent and file involved.
Can we see which devices have a risky skill or MCP server?
Yes. Workstation Lens links supported findings to the affected managed devices, so security and IT can identify where to investigate or update a file. Unmanaged devices are outside that view.
Can Repello stop a risky MCP-related action at runtime?
Where enforcement is supported, Workstation Lens can block covered resource access, commands, or outbound destinations under an active policy. A risky file finding alone does not stop execution; the policy event shows whether an action was blocked.
When should we use SkillCheck versus Workstation Lens?
Use SkillCheck to assess an individual skill before installing it. Use Workstation Lens to inspect supported skills and MCP servers already present on managed devices, investigate related activity, and identify affected devices.
What happens if an approved skill or MCP server changes?
Review the updated instructions, permissions, and destinations. A previous scan reflects the earlier version; Workstation Lens can help relate a new finding to affected devices and supported runtime activity.
Can Repello assess MCP connections in our own AI applications?
Inventory maps supported tools and MCP connections in connected applications, while ARTEMIS tests the behavior exposed through an application. Workstation Lens focuses on agent files and activity on managed devices.
See Repello in action
Get a personalized Repello demo.
Bring a skill or MCP connection you want to assess. See its file findings, agent context, and affected managed devices together.