{"name":"io.github.aristiun/aribot","slug":"aristiun-aribot","title":null,"description":"Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.","url":"https://mcp.market/server/aristiun-aribot","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":18,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-07-13T13:22:06.000Z","license":"MIT"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T05:45:23.382Z","last_ok_at":"2026-11-04T05:45:23.382Z","latency_ms":201},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/aristiun/aribot-mcp","website":"https://aribot.ayurak.com","version":"1.0.0","remotes":[{"type":"streamable-http","url":"https://mcp.aribot.ayurak.com/mcp"}],"packages":[],"tools":[{"name":"apply_remediation","description":"Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"threat_id":{"type":"string","description":"Threat id/code to remediate"},"rule_id":{"type":"string","description":"Policy/rule id (e.g. AWS_S3_PUBLIC_ACCESS)"},"resource_context":{"type":"object","description":"provider/resource_id/region/account_id/metadata"}},"required":["threat_id","rule_id"],"additionalProperties":false}},{"name":"code_review_scan","description":"Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"Id of an existing code-review scan to (re)run"}},"required":["scan_id"],"additionalProperties":false}},{"name":"compliance_scan","description":"Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_type":{"type":"string","enum":["platform","compliance","pipeline","sbom","diagram","account"],"description":"platform | compliance | pipeline | sbom"},"account_id":{"type":"string","description":"Cloud account id (account-scoped scans)"},"diagram_id":{"type":"string","description":"Diagram id/uuid (diagram-scoped scans)"},"frameworks":{"type":"array","items":{"type":"string"},"description":"Optional standard/framework ids to scope the scan"},"severity_filter":{"type":"array","items":{"type":"string"},"description":"Optional severity levels to include"},"simulation_mode":{"type":"boolean","description":"Dry-run the scan without side effects"},"source":{"type":"string","description":"Scan source (default: hybrid)"}},"required":["scan_type"],"additionalProperties":false}},{"name":"compliance_status","description":"Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"Optional anchor scan; latest is used if omitted"},"diagram_id":{"type":"string","description":"Optional diagram to add framework coverage for"}},"required":[],"additionalProperties":false}},{"name":"discover_shadow_ai","description":"Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads code_review ShadowAIReport/ShadowAIDiscovery.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"Optional CodeReviewScan id; company-wide latest if omitted"},"limit":{"type":"integer","description":"Max discoveries to return","default":15}},"required":[],"additionalProperties":false}},{"name":"generate_threat_model","description":"Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"name":{"type":"string","description":"Threat model name"},"nodes":{"type":"array","items":{"type":"object"},"description":"ReactFlow nodes (each: id, position, data.label)"},"edges":{"type":"array","items":{"type":"object"},"description":"ReactFlow edges"}},"required":["nodes"],"additionalProperties":false}},{"name":"get_api_security","description":"API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"Optional CodeReviewScan id; company-wide if omitted"},"limit":{"type":"integer","description":"Max endpoints to return","default":20}},"required":[],"additionalProperties":false}},{"name":"get_billing","description":"Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Use this to view or RESOLVE a 402 without leaving the connector.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"checkout_request_id":{"type":"string","description":"Approved license_request_id to complete payment for (returns a hosted Checkout URL)"},"topup_amount":{"type":"number","description":"Optional EUR amount to top up the credit wallet (returns a hosted Checkout URL)"},"request_plan":{"type":"string","description":"Optional plan key to request (pro|max|…) — files a request for super-admin approval; does not grant or charge"}},"required":[],"additionalProperties":false}},{"name":"get_cloud_compliance","description":"Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> compliances.ScanResults.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"account_id":{"type":"string","description":"Optional single cloud Account id; all company accounts if omitted"}},"required":[],"additionalProperties":false}},{"name":"get_diagram_summary","description":"The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"diagram_id":{"type":"string","description":"Diagram id/uuid"}},"required":["diagram_id"],"additionalProperties":false}},{"name":"get_framework_coverage","description":"Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"diagram_id":{"type":"string","description":"Diagram pk or uuid"},"framework":{"type":"string","description":"Optional framework filter (e.g. 'NIST-800-53', 'SOC2')"},"include_graph":{"type":"boolean","description":"Also return the crossmap node/edge graph","default":false}},"required":["diagram_id"],"additionalProperties":false}},{"name":"get_insights","description":"Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"diagram_id":{"type":"string","description":"Diagram id/uuid"}},"required":["diagram_id"],"additionalProperties":false}},{"name":"get_remediation","description":"Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"threat_id":{"type":"string","description":"Threat id/code to remediate"},"rule_id":{"type":"string","description":"Policy/rule id (e.g. AWS_S3_PUBLIC_ACCESS)"},"resource_context":{"type":"object","description":"provider/resource_id/region/account_id/metadata"}},"required":["threat_id","rule_id"],"additionalProperties":false}},{"name":"get_traceability","description":"Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"Code-review scan id"}},"required":["scan_id"],"additionalProperties":false}},{"name":"onboard_agents","description":"Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"agents":{"type":"array","items":{},"description":"Agent ids or descriptors ({agent_id, display?, cohort?})"},"agent_cards":{"type":"array","items":{"type":"object"},"description":"A2A 1.0 Agent Cards ({name, url, provider, version, protocolVersion, ...})"},"cohort":{"type":"string","description":"Optional shared cohort (provider/model/deployment group)"},"auto_suspend_threshold":{"type":"number","description":"Optional 0..1 auto-suspend deviation threshold for the cohort policy"}},"required":[],"additionalProperties":false}},{"name":"verify_threats_in_code","description":"Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationService.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"scan_id":{"type":"string","description":"CodeReviewScan id (uuid)"},"threat_id":{"type":"string","description":"Optional: a single threat id or code"},"repository_id":{"type":"string","description":"Optional connected repo to fetch code from"},"code_content":{"type":"string","description":"Optional inline code context"},"async_":{"type":"boolean","default":true}},"required":["scan_id"],"additionalProperties":false}}],"scan":{"score":77,"grade":"B","scanned_at":"2026-09-26T05:10:57.343Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T05:10:57.336Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 610ms"]},"poisoning":{"score":15,"max":15,"notes":["16 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 2 write-action tools with no auth"]},"maintenance":{"score":12,"max":15,"notes":["last push 75 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://mcp.aribot.ayurak.com/mcp","reachable":true,"authRequired":false,"latencyMs":610,"serverInfo":{"name":"aribot-mcp","version":"1.0.0"}}],"packages":[],"repo":{"found":true,"owner":"aristiun","repo":"aribot-mcp","archived":false,"pushedAt":"2026-07-13T13:22:06Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/58360357?v=4","ownerCreatedAt":"2019-11-30T10:56:42Z","license":"MIT"},"icon":{"url":"https://aribot.ayurak.com/favicon.ico","source":"site","width":64,"height":64},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-07-13T13:22:06.000Z","score":18}}}},"grade_history":[],"reviews":[]}