Aribot MCP Server

by ayurak Your server? Claim it

answering

Aribot MCP is answering right now. Last checked 11 min ago. It exposes 16 tools.

Threat modeling, code, API & cloud security, shadow-AI & compliance governance.

Uptime history 47 days of history · worst day 99%

47 days agonow

100.0%

Uptime 24h

182 of 182 checks

Tools

read from the server

487 ms

Response time

average over 24h

open, no key

Access

streamable-http

Aribot MCP missed 4 checks this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add aribot-mcp --transport http https://mcp.aribot.ayurak.com/

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "aribot-mcp": {
      "url": "https://mcp.aribot.ayurak.com/"
    }
  }
}

~/.codex/config.toml

[mcp_servers.aribot-mcp]
url = "https://mcp.aribot.ayurak.com/"

.cursor/mcp.json

{
  "mcpServers": {
    "aribot-mcp": {
      "url": "https://mcp.aribot.ayurak.com/"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "aribot-mcp": {
      "url": "https://mcp.aribot.ayurak.com/"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 16

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

compliance

compliance_scan

Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll.

compliance_status

Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup.

api

get_api_security

API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery.

apply

apply_remediation

Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting.

billing

get_billing

Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Use this to view or RESOLVE a 402 without leaving the connector.

cloud

get_cloud_compliance

Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> compliances.ScanResults.

code

code_review_scan

Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix.

diagram

get_diagram_summary

The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage.

discover

discover_shadow_ai

Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads code_review ShadowAIReport/ShadowAIDiscovery.

framework

get_framework_coverage

Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph.

generate

generate_threat_model

Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id.

insights

get_insights

Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists.

onboard

onboard_agents

Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call.

remediation

get_remediation

Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps.

traceability

get_traceability

Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics.

verify

verify_threats_in_code

Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationService.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.aribot.ayurak.com/	streamable-http	answering	469 ms	11 min ago
https://mcp.aribot.ayurak.com/sse	sse	answering	469 ms	11 min ago

Alternatives to Aribot MCP

same job, measured the same way

Aribot

by aristiun

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

16 tools answering

Sentrik

by maxgerhardson

Governance runtime for AI-generated code. Enforce compliance and security standards.

69 installs/wk local only

AgentAegis

by astafford8488

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

28 tools answering

Agentic SDLC MCP

by sakuracianna

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

44 installs/wk local only

Regulatory Signals

by rikocr8orh8

Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.

38 installs/wk local only

Ybe Check

by addycuber

Ybe Check – security and compliance orchestrator for AI-generated repositories.

56 installs/wk local only

Trent

by trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

answering

Mythos Agent

by mythos-agent

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

68 installs/wk local only

Aribot MCP — questions

Answers built from our own checks of this server.

What can Aribot MCP do?

It exposes 16 tools, read directly from the server on our last check. Among them: apply_remediation, code_review_scan, compliance_scan, compliance_status, discover_shadow_ai, generate_threat_model and 10 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Aribot MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 182 of 182 checks got a reply (100.0%), average response time 487 ms. The bar chart above shows every period we have measured.

How do I connect Aribot MCP?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Aribot MCP need an API key?

No. Aribot MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 16 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Aribot MCP?

It answers our handshake in 487 ms on average, which is faster than 30% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.