v1.0.0
AgentSniff v1.0.0
AI Agent Network Scanner — Detect AI agents operating on your network through passive monitoring, active probing, protocol detection, and behavioral analysis.
Features
- 7 detection modules: DNS monitoring, port scanning, AgentPin probing, MCP detection, endpoint probing, TLS fingerprinting, traffic analysis
- Web dashboard with real-time SSE streaming, agent detail expansion, and JSON export
- CLI with table, JSON, and CSV output formats
- Continuous scanning mode with configurable intervals
- Alerting via webhook POST and SMTP email with configurable thresholds and cooldown
- Dashboard settings modal for interactive alert configuration
- Scan cancellation with stop button support
- REST API with full scan management, agent inventory, and settings endpoints
- Docker and Docker Compose support with host networking for passive monitoring
- Cron-friendly one-shot scanning with alert and file output flags
Alert Channels
- Webhook:
--webhook-urlflag or YAML/env config, sends JSON payload with agent details - Email (SMTP):
--smtp-toflag or YAML/env config, sends summary with JSON attachment
Detection Targets
Identifies agents built with LangChain, CrewAI, AutoGen, Symbiont, Dify, Flowise, n8n, and OpenAI Assistants. Detects MCP servers, AgentPin identities, LLM API connections (OpenAI, Anthropic, Google, Mistral, Groq, and 15+ more), and agent-characteristic traffic patterns.