Skip to main content
Glama

aribot

by io.github.aristiun
OverviewDiscussionsAdmin

Server Details

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status
Unhealthy
Uptime
99.3% over 64 days
OAuth
Requires browser extension
Last Tested
Transport
Streamable HTTP
URL
Repository
aristiun/aribot-mcp
GitHub Stars
0
Server Listing
Aribot MCP

TDQS

B3.4/5.0

Scored across 29 tools

Disambiguation3/5

Many tools are clearly distinct, but several compliance/metrics retrieval tools overlap: compliance_status, get_cloud_compliance, get_framework_coverage, and run_ai_governance_audit all report compliance or audit posture. Similarly, get_diagram_summary, get_insights, and get_traceability all surface diagram-level security metrics. Descriptions help, but an agent may still misselect among these.

Naming Consistency4/5

The set is predominantly snake_case with a predictable verb_noun pattern (get_*, list_*, apply_*, assign_*, file_*, sync_*). Minor deviations exist: code_review_scan, compliance_scan, and compliance_status lead with nouns. Overall the naming is readable and consistent enough for an agent to follow.

Tool Count2/5

The server exposes 29 tools across a broad AI-security governance domain, which is heavy. While some tools serve distinct subdomains, the count exceeds 25 and increases the selection surface. This is too many for a well-scoped set according to the calibration.

Completeness3/5

Core workflows for scans, threat models, remediation, tickets, agent governance, and billing are present. However, there are no update/delete operations for diagrams, threat models, or agent identities, and threat management is mostly assign/file/verify rather than full lifecycle. These are notable gaps for a management platform.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • Addedget_agent_governance
    • Addedget_code_findings
    • Addedget_self_healing
    • Addedget_shadow_ai
  2. 2 tool updates
    • Changedcompliance_status1 field changed
      • addedInput schema / properties / framework
        Added value: +{
+  "description": "Optional framework name or id, e.g. 'ISO 27001', 'NIST'",
+  "type": "string"
+}
    • Addedlist_diagrams
  3. 2 tool updates
    • Changedapply_remediation2 fields changed
      • changedInput schema / properties / resource_context / description
        Previous value: -"provider/resource_id/region/account_id/metadata"New value: +"The cloud resource: provider, resource_id (required), region, account_id, metadata"
      • changedInput schema / required
        Previous value: -[
-  "threat_id",
-  "rule_id"
-]New value: +[
+  "threat_id",
+  "rule_id",
+  "resource_context"
+]
    • Changedget_remediation2 fields changed
      • changedInput schema / properties / resource_context / description
        Previous value: -"provider/resource_id/region/account_id/metadata"New value: +"The cloud resource: provider, resource_id (required), region, account_id, metadata"
      • changedInput schema / required
        Previous value: -[
-  "threat_id",
-  "rule_id"
-]New value: +[
+  "threat_id",
+  "rule_id",
+  "resource_context"
+]
  4. 6 tool updates
    • Addedassign_threat
    • Addedcomment_threat_on_change
    • Addedfile_threat_tickets
    • Addedget_threat_tickets
    • Addedlist_ticket_destinations
    • Addedsync_threat_tickets
  5. 2 tool updates
    • Addedgenerate_architecture
    • Addedrun_ai_governance_audit
  6. 4 tool updates
    • Changedcompliance_status2 fields changed
      • changedInput schema / properties / diagram_id / description
        Previous value: -"Optional diagram to add framework coverage for"New value: +"Optional diagram id filter"
      • changedInput schema / properties / scan_id / description
        Previous value: -"Optional anchor scan; latest is used if omitted"New value: +"Optional scan id filter"
    • Changeddiscover_shadow_ai3 fields changed
      • removedInput schema / properties / limit
        Removed value: -{
-  "default": 15,
-  "description": "Max discoveries to return",
-  "type": "integer"
-}
      • changedInput schema / properties / scan_id / description
        Previous value: -"Optional CodeReviewScan id; company-wide latest if omitted"New value: +"Scan id with uploaded code or repository"
      • changedInput schema / required
        Previous value: -[]New value: +[
+  "scan_id"
+]
    • Changedget_framework_coverage4 fields changed
      • changedInput schema / properties / diagram_id / description
        Previous value: -"Diagram pk or uuid"New value: +"Diagram id/uuid"
      • changedInput schema / properties / framework / description
        Previous value: -"Optional framework filter (e.g. 'NIST-800-53', 'SOC2')"New value: +"Optional framework filter (e.g. eu-ai-act, dora, nist, iso)"
      • removedInput schema / properties / include_graph / default
        Removed value: -false
      • changedInput schema / properties / include_graph / description
        Previous value: -"Also return the crossmap node/edge graph"New value: +"Include crossmap relationship graph"
    • Changedverify_threats_in_code5 fields changed
      • removedInput schema / properties / async_
        Removed value: -{
-  "default": true,
-  "type": "boolean"
-}
      • changedInput schema / properties / code_content / description
        Previous value: -"Optional inline code context"New value: +"Optional inline code snippet to verify"
      • changedInput schema / properties / repository_id / description
        Previous value: -"Optional connected repo to fetch code from"New value: +"Optional repository id"
      • changedInput schema / properties / scan_id / description
        Previous value: -"CodeReviewScan id (uuid)"New value: +"Code review scan id"
      • changedInput schema / properties / threat_id / description
        Previous value: -"Optional: a single threat id or code"New value: +"Optional specific threat id/code to verify"
  7. 1 tool update
    • Addedonboard_agents
  8. 15 tool updates
    • First observedapply_remediation
    • First observedcode_review_scan
    • First observedcompliance_scan
    • First observedcompliance_status
    • First observeddiscover_shadow_ai
    • First observedgenerate_threat_model
    • First observedget_api_security
    • First observedget_billing
    • First observedget_cloud_compliance
    • First observedget_diagram_summary
    • First observedget_framework_coverage
    • First observedget_insights
    • First observedget_remediation
    • First observedget_traceability
    • First observedverify_threats_in_code

Related MCP Connectors

Related MCP Servers

  • GuardianShield

    sparkvibe-io
    A
    license
    B
    quality
    D
    maintenance
    Universal AI security layer for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.
    27
    27 PyPI
    3
    Apache 2.0

  • @arcwall/mcp-server

    rom-baro
    A
    license
    A
    quality
    D
    maintenance
    Security scanning for AI coding tools (Claude Code, Cursor, Windsurf) including secrets detection, MCP config vulnerabilities, agent instruction checks, threat modeling, prompt injection testing, pre-commit security checks, and dependency vulnerability scanning.
    7
    22 npm
    1
    MIT

  • SecureVibes MCP

    SimonvanAs
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI-powered security scanning of codebases through conversational analysis, allowing users to assess, threat model, code review, DAST test, and generate security reports using natural language with Claude.
    MIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources