Ostorlab MCP Server

by ostorlab Your server? Claim it

answering

Ostorlab is answering right now. Last checked 8 min ago.

Query and act on your Ostorlab scans, vulnerabilities, tickets and assets.

Uptime history 7 days of history

7 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

178 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check Ostorlab every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http 'https://api.ostorlab.co/apis/mcp/{api_key}/'

Settings → Connectors → Add custom connector, then paste this address

https://api.ostorlab.co/apis/mcp/{api_key}/

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://api.ostorlab.co/apis/mcp/{api_key}/"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://api.ostorlab.co/apis/mcp/{api_key}/"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://api.ostorlab.co/apis/mcp/{api_key}/"
    }
  }
}

Endpoints

URL	Transport	State	Latency	Checked
https://api.ostorlab.co/apis/mcp/{api_key}/	streamable-http	answering	116 ms	8 min ago

Alternatives to Ostorlab

same job, measured the same way

Strix

by strix

AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.

answering

Auditon security assessments

by auditon

Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.

answering

OSV Advisories

by basitalisandhu

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

local only

Vibgrate

by vibgrate

Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.

answering

Osv Advisory MCP Server

by cyanheads

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

286 installs/wk 5 tools answering

Base Security Scanner MCP

by lordbasilaiassistant-sudo

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

70 installs/wk local only

middleBrick

by middlebrick

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

36 installs/wk local only

Scannd

by scannd

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

59 installs/wk local only

Ostorlab — questions

Answers built from our own checks of this server.

Is Ostorlab working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 178 ms. The bar chart above shows every period we have measured.

How do I connect Ostorlab?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Ostorlab need an API key?

No. Ostorlab completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. This is what we observed, not what the docs claim.

How fast is Ostorlab?

It answers our handshake in 178 ms on average, which is faster than 76% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.