Netbase Solution Services · AI agent builders
A security review for your MCP server and agents
The AdminKit MCP and agent hardening service is a Netbase review of a public or internal MCP server: how callers authenticate, which tools are exposed and to whom, and how tool responses could carry prompt injection. You get findings and concrete fixes, without deploying a gateway.
- Delivered by
- Netbase JSC
- Engagement
- One-time review
- Pricing
- Custom quote
Updated · AdminKit team, Netbase JSC
Who is this service for?
- Developers publishing an MCP server
- Startups adding agent tool access
- AI agency builders running multi-server agents
What does Netbase deliver?
Every engagement starts from a written scope. This is what it covers, what it does not, and what can be added.
Supported
- OAuth and token handling per the MCP authorization specification
- Tool exposure and allowlist recommendations
- Prompt-injection risks in tool responses
- Public reachability, checked with AdminKit mcp-check
Not included
- Deploying or running a gateway (see MCP & Agent Gateway deployment)
- Rewriting your MCP server code
- Reviewing third-party MCP servers you do not operate
Extra services
- MCP & Agent Gateway deployment in front of the server
- Agent Trust API checks in your CI pipeline
- A re-review after fixes are applied
How does an engagement run?
Scoping call
Which MCP servers, clients and identity provider.
Written scope and quote
What is reviewed and how.
Review
Auth, tool exposure and response handling, starting with mcp-check.
Findings and fixes
Walked through with your developers.
What do you get at the end?
- An exposure and authentication review of your MCP server
- A list of exposed tools, with which ones should be restricted
- Prompt-injection risks in tool responses, with mitigations
- A fix list your developers can work through
Who delivers this service?
Netbase Enterprise Solutions and Applications Joint Stock Company (Netbase JSC)
- Netbase JSC was founded in 2012.
- Netbase JSC has served 500+ clients.
- Netbase has worked with clients in 80 countries.
- Every service is delivered remotely, so clients in any country and any industry can engage.
- Contracts and invoices are issued by Netbase JSC; payment goes to the company by bank transfer to Netbase JSC's company account or PayPal Business.
Which AdminKit products and tools does this build on?
Netbase engineers use the same AdminKit checks you can run yourself for free, so you can see the starting point and re-check the result after handover.
What are you responsible for?
Every engagement runs on a written scope of work with a responsibility matrix: what Netbase JSC commits to and what stays with you. Changes to scope are agreed and re-quoted before work continues. Contracts and invoices are issued by Netbase JSC. Automated AdminKit checks used along the way are advisory, as described in the disclaimer.
Talk to an expert
Huy Nguyen (David), Founder & CEO, Netbase JSC
Ask about MCP / agent hardening: scope, timing or a quote.
Frequently asked questions
How is hardening different from the MCP & Agent Gateway?
Hardening is a review: we find the gaps and you fix them in your own server. The gateway deployment puts a Netbase-run proxy in front of the server that enforces OAuth, an allowlist, rate limits and an audit log for you.
Do you need access to our source code?
Not necessarily. Much of the review works from the server endpoint, its tool list and your configuration. Source access helps for response-handling findings and is agreed in the scope.
Can a review rule out prompt injection completely?
No review can guarantee that. It reduces the paths by which untrusted content reaches your agent and limits what a manipulated agent can call.
How much does an MCP hardening review cost?
It is quoted after scoping, based on the number of servers and tools. There is no fixed public price.
Talk to our team about this service
Tell us what you run and what you need. We scope it with you first, then send a quote.