ATK Security Checks MCP Server

by atkvn Your server? Claim it

answering

ATK Security Checks is answering right now. Last checked 7 min ago. It exposes 5 tools.

PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps

Uptime history 10 days of history

10 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

479 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 23 October 2026. No other catalogue keeps this.

23 Oct a tool appeared check_php2shell

23 Oct a tool changed version

Nothing serious here today

Today is the operative word: we check ATK Security Checks every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add security-checks --transport http https://atkvn.com/agent/mcp

Settings → Connectors → Add custom connector, then paste this address

https://atkvn.com/agent/mcp

~/.codex/config.toml

[mcp_servers.security-checks]
url = "https://atkvn.com/agent/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "security-checks": {
      "url": "https://atkvn.com/agent/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "security-checks": {
      "type": "http",
      "url": "https://atkvn.com/agent/mcp"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit

audit_wazuh_rules

Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or colliding ids). Input: list of {filename, xml}. Supported versions: 4.14.7, 4.14.9. Free: counts + 2 findings. Full report: pass api_key.

php2shell

check_php2shell

Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evidence collected on the server: `php -v`, `php -i` or `php-fpm -i`, `cat /etc/os-release`, `dpkg -l 'php*'` or `rpm -qa 'php*'`. Returns patched / vulnerable / check_vendor_backport, the exact changelog command that decides distribution builds, upgrade commands, config mitigations until patched, and a tested Wazuh rule pack for crash and OOM signals. Free. Nothing is fetched from your servers.

post

check_post_quantum_tls

Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS handshake per probe, no scanning.

test

test_wazuh_rule

Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rule fired, and load warnings such as 7617/7619. Logtest engine: frequency/timeframe rules and some live-only behaviour are out of scope. Free: 1 log line with your files (3 with the stock ruleset only), summary. 10 lines with decoded fields and full alerts: POST https://atkvn.com/agent/v1/wazuh-testfire (x402, USD 0.10).

tls

check_tls_certificate

Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and name mismatches). Free.

Endpoints

URL	Transport	State	Latency	Checked
https://atkvn.com/agent/mcp	streamable-http	answering	390 ms	7 min ago

Alternatives to ATK Security Checks

same job, measured the same way

Arbiter

by arbiterscan

Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

answering

Agent Field Kit

by agentfieldkit

Search, price and buy field-tested agent-ops kits (evals, security, runbooks) via Stripe checkout.

12 tools answering

rowstile

by rowstile

Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

293 installs/wk local only

Fray — WAF Security Testing MCP Server

by dalisecurity

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

1 353 installs/wk local only

AppLedger

by appledger

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

216 installs/wk local only

Dep

by rog0x

License check, outdated deps, security for AI agents

36 installs/wk local only

NSW Licences

by fisher98kim

Check licences on 15 NSW public registers: trades, property, security, liquor, WHS and more.

local only

NativeKeel

by alicanakyol

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

3 175 installs/wk local only

ATK Security Checks — questions

Answers built from our own checks of this server.

What can ATK Security Checks do?

It exposes 5 tools, read directly from the server on our last check. Among them: audit_wazuh_rules, check_php2shell, check_post_quantum_tls, check_tls_certificate, test_wazuh_rule. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is ATK Security Checks working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 479 ms. The bar chart above shows every period we have measured.

How do I connect ATK Security Checks?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does ATK Security Checks need an API key?

No. ATK Security Checks completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is ATK Security Checks?

It answers our handshake in 479 ms on average, which is faster than 25% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.