IA-QA Security — 30 tools for Gemini CLI
io.github.jcjamet/ia-qa-security
Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.
client:Gemini CLI
transport:streamable-http
tools:30
Install IA-QA Security — 30 tools in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"ia-qa-security": {
"httpUrl": "https://www.ia-qa.com/mcp/security"
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs
What Gemini CLI can do once it is connected
- find_tool
- prompt_injection_scan
- guardrail_test
- redact_pii
- secret_scan
- validate_agent_trajectory
- validate_mcp_response
- mcp_server_health_check
- mcp_server_evaluate
- toxicity_scan
- function_call_validate
- mcp_schema_lint
- bias_detect
- shield_analyze
- security_headers_check
- ssl_certificate_check
- cors_test
- cors_checker
- cookie_security_audit
- web_security_audit
- rate_tool
- decode_jwt
- validate_url
- http_status_lookup