aribot-mcp

{
  "id": "aix_52d73d0c7f",
  "name": "aribot-mcp",
  "operator": "(unclaimed - source: registry-official · publisher: com.ayurak)",
  "description": "Threat modeling, code, API & cloud security, shadow-AI & compliance governance.",
  "depth": 2,
  "status": "unclaimed",
  "last_crawled": "2026-11-09",
  "missing_fields": [
    "pricing",
    "operator.identity"
  ],
  "skills": [
    "code-review",
    "github-ops",
    "inventory-check",
    "sql-database",
    "vector-search",
    "vulnerability-scan"
  ],
  "protocols": {
    "mcp": "https://mcp.aribot.ayurak.com/",
    "a2a": null
  },
  "pricing": null,
  "regions": [
    "global"
  ],
  "languages": [
    "en"
  ],
  "reputation": {
    "tasks_completed": null,
    "dispute_rate": null,
    "p95_latency_ms": 3373,
    "uptime_30d": 0.9971014492753624,
    "onchain_volume_30d_usd": null
  },
  "aix_score": 39,
  "verification": {
    "identity": "none",
    "health": "probe/24h",
    "pricing": "unknown",
    "last_check": "2026-11-09T10:00:40.813Z"
  },
  "pricing_model": "unknown",
  "links": [
    {
      "label": "homepage",
      "url": "https://api.aribot.ayurak.com/aribot/claude-connector"
    }
  ],
  "profile": {
    "mcp_server": "aribot-mcp",
    "mcp_version": "1.1.0",
    "tool_count": 29,
    "tools": [
      {
        "name": "get_billing",
        "description": "Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a hosted Stripe Checkout URL to COMPLETE an approved plan, `topup_amount` (EUR) to get one to TOP UP the wallet, or `request_plan` (starter|pay_per_use|pro|max|enterprise) to REQUEST a plan (files a request for super-admin approval — never grants). Returns the details needed to resolve a 402 (licence or credit required)."
      },
      {
        "name": "onboard_agents",
        "description": "Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, under an optional `cohort` + shared auto-suspend policy. Idempotent. Requires the agent_governance licence + a manage:agents grant (or a first-party super-admin). Agents also self-onboard on first token/call."
      },
      {
        "name": "generate_threat_model",
        "description": "Create a threat model from a normalized architecture (ReactFlow nodes + edges). Aribot stores the components and generates the threats. Returns the diagram id."
      },
      {
        "name": "verify_threats_in_code",
        "description": "Verify whether modelled STRIDE/LINDDUN threats are mitigated in a scan's uploaded code or AST. If threat_id is provided, returns synchronous verdict; otherwise dispatches batch verification across all diagram threats."
      },
      {
        "name": "get_traceability",
        "description": "Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics."
      },
      {
        "name": "get_framework_coverage",
        "description": "Get control-mapped coverage percentages, gap counts, and mapped controls for EU AI Act, DORA, NIST AI RMF, ISO 27001, SOC 2, etc."
      },
      {
        "name": "get_remediation",
        "description": "Compute a remediation plan for a threat or finding without applying it (dry run). Runs Aribot's governed remediation checks and returns the proposed steps."
      },
      {
        "name": "compliance_status",
        "description": "Company-level compliance posture: per-framework posture from the daily cloud scans (checks passed/failed, controls tested/failing), plus threat and control metrics from code scans. Pass `framework` (e.g. 'ISO 27001') to get that framework's most-failing controls. Rates are percentages (0-100)."
      },
      {
        "name": "discover_shadow_ai",
        "description": "Scan connected repositories and network traffic for unmanaged LLMs, foundational model endpoints, vector databases, agent frameworks, and leaked API keys (async)."
      },
      {
        "name": "get_api_security",
        "description": "API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`."
      },
      {
        "name": "get_cloud_compliance",
        "description": "Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — daily-scan posture (checks passed/failed) and the last manual scan's compliance %, failing policies/records — plus a company rollup."
      },
      {
        "name": "code_review_scan",
        "description": "Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix."
      },
      {
        "name": "compliance_scan",
        "description": "Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll."
      },
      {
        "name": "apply_remediation",
        "description": "Apply a remediation for real (mode=live). Goes through Aribot's governance checks (attack-path reachability, autonomy policy and the approval flow). If your policy requires approval it returns 'requires_approval' rather than acting."
      },
      {
        "name": "get_diagram_summary",
        "description": "Summary of a diagram: threat counts by severity, risk value, compliance and framework coverage."
      },
      {
        "name": "list_diagrams",
        "description": "List your company's threat-model diagrams (id, name, last update), newest first, optionally filtered by part of the name."
      },
      {
        "name": "get_insights",
        "description": "Code-security metrics for a diagram: the threat → finding → control metrics of its latest code-security scan. code_scan is null when the diagram has no scan yet."
      },
      {
        "name": "generate_architecture",
        "description": "Generate a multi-tier cloud/AI architecture and auto-synthesize STRIDE/LINDDUN threat models, security requirements, and regulatory control mappings directly from a natural-language description. Runs in the background (a few minutes); returns the name the diagram is saved under."
      },
      {
        "name": "run_ai_governance_audit",
        "description": "Audit an architecture diagram or code scan against statutory AI governance frameworks (EU AI Act 2024, EU DORA 2022, NIST AI RMF 1.0, ISO 42001). Evaluates article-by-article conformity, satisfied controls, open gaps, and generates actionable remediation guidance."
      },
      {
        "name": "get_code_findings",
        "description": "Findings from a code-security scan (SAST, secrets, dependencies): title, severity, file and line, CWE/OWASP category, status and the recommended fix. Latest completed scan when scan_id is omitted."
      },
      {
        "name": "get_shadow_ai",
        "description": "AI usage found in your code and network traffic: provider, service type, model, endpoint, where it was found, risk level, classification and whether a hard-coded key was seen. Company-wide, or one scan with scan_id."
      },
      {
        "name": "get_agent_governance",
        "description": "Your governed AI-agent fleet: each agent's id, name, cohort, whether it is active, its execution state (running, held, suspended), deviation score and the reason for any hold. Totals by state."
      },
      {
        "name": "get_self_healing",
        "description": "Remediation (self-healing) history: each planned or applied fix with its threat, rule, resource, mode (dry run or live), status and outcome, plus whether autonomous live remediation is switched on for your company."
      },
      {
        "name": "list_ticket_destinations",
        "description": "Trackers, routes and destinations this caller may send threats to (no credentials)."
      },
      {
        "name": "file_threat_tickets",
        "description": "Send 1-50 threat report entries to the tracker their route points at (or `destination`). One ticket per threat per report; a repeat returns already_filed. dry_run=true returns the exact tickets without sending; a preview with public_repository=true goes to a public repository, visible to anyone. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded a"
      }
    ],
    "profiled_at": "2026-10-18T04:00:29.588Z"
  },
  "unreachable": false,
  "payment_method": "open"
}