Search / com.ayurak/aribot-mcp
protogridR2· OAuth, onceThreat modeling, code, API & cloud security, shadow-AI & compliance governance.
v1.1.1 · active · website · descriptor JSON · versions
{
"mcpServers": {
"aribot-mcp": {
"type": "http",
"url": "https://mcp.aribot.ayurak.com/"
}
}
}claude mcp add --transport http aribot-mcp https://mcp.aribot.ayurak.com/[mcp_servers.aribot-mcp]
url = "https://mcp.aribot.ayurak.com/"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"aribot-mcp": {
"type": "remote",
"url": "https://mcp.aribot.ayurak.com/",
"enabled": true
}
}
}{
"mcpServers": {
"aribot-mcp": {
"type": "http",
"url": "https://mcp.aribot.ayurak.com/"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=aribot-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLmFyaWJvdC5heXVyYWsuY29tLyJ9"
}{
"servers": {
"aribot-mcp": {
"type": "http",
"url": "https://mcp.aribot.ayurak.com/"
}
}
}{
"mcpServers": {
"aribot-mcp": {
"httpUrl": "https://mcp.aribot.ayurak.com/"
}
}
}extensions:
"aribot-mcp":
enabled: true
name: "aribot-mcp"
type: streamable_http
uri: "https://mcp.aribot.ayurak.com/"
timeout: 300
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prmProtected Resource Metadata (RFC 9728) publishedauth.as_metadataauthorization server metadata reachableauth.cimdonly Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMDauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations29 of 29 tools declare readOnlyHint or destructiveHinttools.directory_hints2 of 29 tools declare all four hints; missing: get_billing (idempotentHint); verify_threats_in_code (idempotentHint); get_remediation (idempotentHint); …tools.token_costabout 5,099 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes39 tool changes in 30 daysstability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting themdeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packagecomment_threat_on_changechangedannotationsget_threat_ticketschangedannotationslist_ticket_destinationschangedannotationsget_self_healingchangedannotationsget_agent_governancechangedannotationsget_shadow_aichangedannotationsget_code_findingschangedannotationsrun_ai_governance_auditchangedannotationsgenerate_architecturechangedannotationsget_insightschangedannotationsShowing the latest 10. Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% +updated-4d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://mcp.aribot.ayurak.com/ streamable-http | oauth2 AS: https://api.aribot.ayurak.com | yes | 100% | 384 ms | – | 2026-10-20 |
apply_remediationdestructive | Apply a remediation for real (mode=live). Goes through Aribot's governance checks (attack-path reachability, autonomy policy and the approval flow). If your policy requires approval it returns 'requires_approval' rather than acting. |
assign_threat | Set the owner and due date of a threat entry; the linked ticket follows. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent. |
code_review_scan | Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix. |
comment_threat_on_changedestructive | For a completed pipeline scan of a pull request: post, or update, one comment per threat whose linked code the pull request changes. A re-run with nothing changed makes no calls. Returns each comment's status (posted, updated, skipped with the reason, failed). Public repositories are skipped with the reason 'public repository'. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent. |
compliance_scan | Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll. |
compliance_statusread-only | Company-level compliance posture: per-framework posture from the daily cloud scans (checks passed/failed, controls tested/failing), plus threat and control metrics from code scans. Pass `framework` (e.g. 'ISO 27001') to get that framework's most-failing controls. Rates are percentages (0-100). |
discover_shadow_ai | Scan connected repositories and network traffic for unmanaged LLMs, foundational model endpoints, vector databases, agent frameworks, and leaked API keys (async). |
file_threat_tickets | Send 1-50 threat report entries to the tracker their route points at (or `destination`). One ticket per threat per report; a repeat returns already_filed. dry_run=true returns the exact tickets without sending; a preview with public_repository=true goes to a public repository, visible to anyone. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent. |
generate_architecture | Generate a multi-tier cloud/AI architecture and auto-synthesize STRIDE/LINDDUN threat models, security requirements, and regulatory control mappings directly from a natural-language description. Runs in the background (a few minutes); returns the name the diagram is saved under. |
generate_threat_model | Create a threat model from a normalized architecture (ReactFlow nodes + edges). Aribot stores the components and generates the threats. Returns the diagram id. |
get_agent_governanceread-only | Your governed AI-agent fleet: each agent's id, name, cohort, whether it is active, its execution state (running, held, suspended), deviation score and the reason for any hold. Totals by state. |
get_api_securityread-only | API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. |
get_billing | Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Returns the details needed to resolve a 402 (licence or credit required). |
get_cloud_complianceread-only | Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — daily-scan posture (checks passed/failed) and the last manual scan's compliance %, failing policies/records — plus a company rollup. |
get_code_findingsread-only | Findings from a code-security scan (SAST, secrets, dependencies): title, severity, file and line, CWE/OWASP category, status and the recommended fix. Latest completed scan when scan_id is omitted. |
get_diagram_summaryread-only | Summary of a diagram: threat counts by severity, risk value, compliance and framework coverage. |
get_framework_coverageread-only | Get control-mapped coverage percentages, gap counts, and mapped controls for EU AI Act, DORA, NIST AI RMF, ISO 27001, SOC 2, etc. |
get_insightsread-only | Code-security metrics for a diagram: the threat → finding → control metrics of its latest code-security scan. code_scan is null when the diagram has no scan yet. |
get_remediationread-only | Compute a remediation plan for a threat or finding without applying it (dry run). Runs Aribot's governed remediation checks and returns the proposed steps. |
get_self_healingread-only | Remediation (self-healing) history: each planned or applied fix with its threat, rule, resource, mode (dry run or live), status and outcome, plus whether autonomous live remediation is switched on for your company. |
get_shadow_airead-only | AI usage found in your code and network traffic: provider, service type, model, endpoint, where it was found, risk level, classification and whether a hard-coded key was seen. Company-wide, or one scan with scan_id. |
get_threat_ticketsread-only | Tickets (tracker, number, state, assignee) for the given threat entries, or for a diagram. |
get_traceabilityread-only | Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics. |
list_diagramsread-only | List your company's threat-model diagrams (id, name, last update), newest first, optionally filtered by part of the name. |
list_ticket_destinationsread-only | Trackers, routes and destinations this caller may send threats to (no credentials). |
onboard_agents | Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call. |
run_ai_governance_auditread-only | Audit an architecture diagram or code scan against statutory AI governance frameworks (EU AI Act 2024, EU DORA 2022, NIST AI RMF 1.0, ISO 42001). Evaluates article-by-article conformity, satisfied controls, open gaps, and generates actionable remediation guidance. |
sync_threat_tickets | Pull the current state and assignee of this company's open tickets (max 50 per call, time-boxed). Returns {checked, changed, errors, remaining}; remaining > 0 means call again to continue. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent. |
verify_threats_in_code | Verify whether modelled STRIDE/LINDDUN threats are mitigated in a scan's uploaded code or AST. If threat_id is provided, returns synchronous verdict; otherwise dispatches batch verification across all diagram threats. |
Schemas: list_tools.
{
"name": "com.ayurak/aribot-mcp",
"icons": [
{
"src": "https://aribot.ayurak.com/aribot-icon.svg",
"sizes": [
"any"
],
"mimeType": "image/svg+xml"
}
],
"title": "Aribot",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.aribot.ayurak.com/",
"type": "streamable-http"
}
],
"version": "1.1.1",
"websiteUrl": "https://api.aribot.ayurak.com/aribot/claude-connector",
"description": "Threat modeling, code, API & cloud security, shadow-AI & compliance governance."
}