Aribot is answering right now. Last checked 10 min ago. It exposes 16 tools. Last commit 13 Jul 2026.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Uptime history
47 days of history · worst day 99%
47 days agonow
100.0%
Uptime 24h
91 of 91 checks
16
Tools
read from the server
483 ms
Response time
average over 24h
0
Stars
last commit 13 Jul 2026
Aribot missed 2 checks this week
Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
run in your terminal
claude mcp add aribot --transport http https://mcp.aribot.ayurak.com/mcp~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/mcp"
}
}
}~/.codex/config.toml
[mcp_servers.aribot]
url = "https://mcp.aribot.ayurak.com/mcp".cursor/mcp.json
{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/mcp"
}
}
}.vscode/mcp.json
{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/mcp"
}
}
}Available tools 16
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
compliance
compliance_scan
Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll.
compliance_status
Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup.
api
get_api_security
API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery.
apply
apply_remediation
Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting.
billing
get_billing
Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Use this to view or RESOLVE a 402 without leaving the connector.
cloud
get_cloud_compliance
Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> compliances.ScanResults.
code
code_review_scan
Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix.
diagram
get_diagram_summary
The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage.
discover
discover_shadow_ai
Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads code_review ShadowAIReport/ShadowAIDiscovery.
framework
get_framework_coverage
Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph.
generate
generate_threat_model
Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id.
insights
get_insights
Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists.
onboard
onboard_agents
Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call.
remediation
get_remediation
Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps.
traceability
get_traceability
Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics.
verify
verify_threats_in_code
Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationService.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.aribot.ayurak.com/mcp | streamable-http | answering | 474 ms | 10 min ago |
Alternatives to Aribot
same job, measured the same wayAribot MCP
by ayurak
Threat modeling, code, API & cloud security, shadow-AI & compliance governance.
I
Lorem
by ankitashanbhag30
Slide decks over MCP: read and write decks as code, run Lorem's full AI pipeline, export PPTX/PDF.
AgentAegis
by astafford8488
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
LiveCheck AI
by qualityclouds
Secure MCP runtime server for scanning and autofixing code issues
opchain
by asfbay-bit
Claude Code / MCP skills for the dev pipeline: discover, spec, design, build, ship, operate.
AI Worlds CLI Knowledge
by claude-world
Source-checked CLI guides and model-aware planning for Claude Code, Codex, and Grok Build.
Lexvibe
by marcosnovo
One-step legal compliance for vibe-coded apps: privacy, terms, cookie banner and EU AI Act check.
Accessibility AI
by groundlogic-ai-source
Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.
Aribot — questions
Answers built from our own checks of this server.
What can Aribot do?
It exposes 16 tools, read directly from the server on our last check. Among them: apply_remediation, code_review_scan, compliance_scan, compliance_status, discover_shadow_ai, generate_threat_model and 10 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README.
How MCP servers expose tools in the first place →
Is Aribot working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 483 ms. The bar chart above shows every period we have measured.
How do I connect Aribot?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Aribot need an API key?
No. Aribot completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 16 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Aribot?
It answers our handshake in 483 ms on average, which is faster than 30% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Aribot open source?
Yes — it is published under the MIT licence, written in HTML and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.