# aribot-mcp MCP server

Threat modeling, code, API & cloud security, shadow-AI & compliance governance.

## Links
- Registry page: https://www.getdrio.com/mcp/com-ayurak-aribot-mcp
- Website: https://api.aribot.ayurak.com/aribot/claude-connector

## Install
- Endpoint: https://mcp.aribot.ayurak.com/
- Auth: Not captured

## Setup notes
- Remote endpoint: https://mcp.aribot.ayurak.com/
- Remote endpoint: https://mcp.aribot.ayurak.com/sse

## Tools
- get_billing - Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Use this to view or RESOLVE a 402 without leaving the connector. Endpoint: https://mcp.aribot.ayurak.com/
- onboard_agents - Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call. Endpoint: https://mcp.aribot.ayurak.com/
- generate_threat_model (Generate Threat Model) - Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id. Endpoint: https://mcp.aribot.ayurak.com/
- verify_threats_in_code (Verify Threats in Code) - Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationService. Endpoint: https://mcp.aribot.ayurak.com/
- get_traceability (Get Traceability Matrix) - Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics. Endpoint: https://mcp.aribot.ayurak.com/
- get_framework_coverage (Get Framework Coverage) - Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph. Endpoint: https://mcp.aribot.ayurak.com/
- get_remediation (Get Remediation Guidance) - Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps. Endpoint: https://mcp.aribot.ayurak.com/
- compliance_status (Get Compliance Status) - Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup. Endpoint: https://mcp.aribot.ayurak.com/
- discover_shadow_ai - Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads code_review ShadowAIReport/ShadowAIDiscovery. Endpoint: https://mcp.aribot.ayurak.com/
- get_api_security - API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery. Endpoint: https://mcp.aribot.ayurak.com/
- get_cloud_compliance - Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> compliances.ScanResults. Endpoint: https://mcp.aribot.ayurak.com/
- code_review_scan (Run a code security scan) - Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix. Endpoint: https://mcp.aribot.ayurak.com/
- compliance_scan (Run a platform / compliance scan) - Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll. Endpoint: https://mcp.aribot.ayurak.com/
- apply_remediation (Apply a remediation (governed)) - Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting. Endpoint: https://mcp.aribot.ayurak.com/
- get_diagram_summary (Get a diagram summary) - The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage. Endpoint: https://mcp.aribot.ayurak.com/
- get_insights (Get diagram insights) - Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists. Endpoint: https://mcp.aribot.ayurak.com/
- get_billing - Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Use this to view or RESOLVE a 402 without leaving the connector. Endpoint: https://mcp.aribot.ayurak.com/sse
- onboard_agents - Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call. Endpoint: https://mcp.aribot.ayurak.com/sse
- generate_threat_model (Generate Threat Model) - Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id. Endpoint: https://mcp.aribot.ayurak.com/sse
- verify_threats_in_code (Verify Threats in Code) - Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationService. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_traceability (Get Traceability Matrix) - Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_framework_coverage (Get Framework Coverage) - Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_remediation (Get Remediation Guidance) - Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps. Endpoint: https://mcp.aribot.ayurak.com/sse
- compliance_status (Get Compliance Status) - Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup. Endpoint: https://mcp.aribot.ayurak.com/sse
- discover_shadow_ai - Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads code_review ShadowAIReport/ShadowAIDiscovery. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_api_security - API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_cloud_compliance - Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> compliances.ScanResults. Endpoint: https://mcp.aribot.ayurak.com/sse
- code_review_scan (Run a code security scan) - Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix. Endpoint: https://mcp.aribot.ayurak.com/sse
- compliance_scan (Run a platform / compliance scan) - Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll. Endpoint: https://mcp.aribot.ayurak.com/sse
- apply_remediation (Apply a remediation (governed)) - Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_diagram_summary (Get a diagram summary) - The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage. Endpoint: https://mcp.aribot.ayurak.com/sse
- get_insights (Get diagram insights) - Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists. Endpoint: https://mcp.aribot.ayurak.com/sse

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: com.ayurak
- Version: 1.0.1
- Runtime: Sse, Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jul 5, 2026
- Source: https://registry.modelcontextprotocol.io