TOPY.AI · AI CSO MCP Server

by topy Your server? Claim it

answering

TOPY.AI · AI CSO is answering right now. Last checked 6 min ago. 252 installs a week from npm. Last commit 27 Oct 2026.

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

Installs per day peak 191 · avg 8

a month agotoday

Uptime history 5 days of history

5 days agonow

100.0%

Uptime 24h

92 of 92 checks

—

Tools

hidden behind auth

211 ms

Response time

average over 24h

252

Installs / week

npm and PyPI

What the code does

We read the source, 3 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] src/client.js:1, [пакет] bin/cso-mcp.js:1, [пакет] src/stdio.js:1

этот файл ставится пользователю, но в репозитории его нет

Runs an external command [пакет] bin/cso-mcp.js:14

    spawn(opener, [url], { stdio: 'ignore', detached: true }).on('error', () => {}).unref();

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add cso --transport http https://topy.ai/mcp/cso

Settings → Connectors → Add custom connector, then paste this address

https://topy.ai/mcp/cso

~/.codex/config.toml

[mcp_servers.cso]
url = "https://topy.ai/mcp/cso"

.cursor/mcp.json

{
  "mcpServers": {
    "cso": {
      "url": "https://topy.ai/mcp/cso"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "cso": {
      "type": "http",
      "url": "https://topy.ai/mcp/cso"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URL	Transport	State	Latency	Checked
https://topy.ai/mcp/cso	streamable-http	sign-in	225 ms	6 min ago

Alternatives to TOPY.AI · AI CSO

same job, measured the same way

Exploitwatch

by vercel-exploitwatch-kappa

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

1 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

Dependency Vulnerability Check (OSV)

by brunckel

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

answering

VibeDoctor

by vibedoctor

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

1 tools answering

Arcwall Security

by rom-baro

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

41 installs/wk local only

GhostFree

by shane-js

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

30 installs/wk local only

Bawbel Scanner

by bawbel

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

91 installs/wk local only

Inkog

by inkog-io

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

127 installs/wk local only

TOPY.AI · AI CSO — questions

Answers built from our own checks of this server.

Why is there no tool list for TOPY.AI · AI CSO?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is TOPY.AI · AI CSO working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 211 ms. The bar chart above shows every period we have measured.

How do I connect TOPY.AI · AI CSO?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.

How do you sign in to TOPY.AI · AI CSO?

No API key is involved. TOPY.AI · AI CSO answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.

How fast is TOPY.AI · AI CSO?

It answers our handshake in 211 ms on average, which is faster than 67% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use TOPY.AI · AI CSO?

The npm package @topy-ai/cso-mcp was installed 252 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is TOPY.AI · AI CSO open source?

The code is open source: it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at topy.ai, which runs on its operator's own terms.