aribot-mcp

connects

mcp.aribot.ayurak.com

Threat modeling, code, API & cloud security, shadow-AI & compliance governance.

https://mcp.aribot.ayurak.com/WebsiteOAuthMCP 2024-11-05v1.0.0last checked 24 Aug 2026spoke MCP on 2 of 2 checks (30 days)initialize in 1081 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://api.aribot.ayurak.com
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	read:findings, run:codereview, read:threatmodel, write:threatmodel, run:scan, read:insights, offline_access
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 16 tools listable

What the probe found

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

16 tools usable without signing in

The server exposes a public surface before authorization: get_billing, onboard_agents, generate_threat_model, verify_threats_in_code, get_traceability, get_framework_coverage, get_remediation, compliance_status, discover_shadow_ai, get_api_security, get_cloud_compliance, code_review_scan, compliance_scan, apply_remediation, get_diagram_summary, get_insights.

Tools

apply_remediationcode_review_scancompliance_scancompliance_statusdiscover_shadow_aigenerate_threat_modelget_api_securityget_billingget_cloud_complianceget_diagram_summaryget_framework_coverageget_insightsget_remediationget_traceabilityonboard_agentsverify_threats_in_code

Contract history

24 Aug 2026v1.0.0first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/aribot-mcp/badge.svg)](https://mcpi.app/servers/aribot-mcp)