A
licenseA
qualityA
maintenanceAI agent governance through MCP - policy enforcement, quantum-safe audit trails (ML-DSA), multi-party authorization, and compliance reporting for AI agents.
15
6
MIT
Systemores AI Agent & MCP Security Auditor
Server Details
AI agent security, MCP 2026 schema & graph audits, <250ms guardrails, and compliance dossiers
If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- bobcar0/systemores-plugin
- GitHub Stars
- 1
- Server Listing
- Systemores Cloud MCP Server
- ChatGPT
- –
- Claude
- –
TDQS
B3.4/5.0
Scored across 12 tools
Disambiguation3/5
The `audit_tool_integrity` (static schema/naming/injection-surface scan of tool definitions) vs `tool_integrity` (system-prompt conditions for safe tool use) pair is nearly indistinguishable by name and will cause misselection. `analyze_trace_telemetry` and `measure_drag` also both surface latency/cognitive-drag metrics, though the trace-vs-single-run distinction gives partial separation.
Naming Consistency4/5
All names share the `systemores_` prefix and consistent snake_case, which is good. The only deviations are that `systemores_tool_integrity` lacks a leading verb unlike its siblings and its name shadows `audit_tool_integrity`, weakening the pattern's clarity.
Tool Count5/5
Twelve tools is well within the sweet spot and each maps to a distinct phase of an audit workflow (static graph, tool surface, prompt surface, runtime turn, drift, stress, cohort, chaos, telemetry, reporting). No tool looks like filler or an obvious internal helper leaked into the surface.
Completeness4/5
The audit lifecycle is well covered end-to-end, from synthetic cohort generation and chaos injection through static/runtime auditing to formal export dossiers. Gaps exist around the 'MCP' half of the stated purpose: there is no tool to enumerate or register MCP servers/configs, audit credentials, or retrieve previously stored findings outside the export dossier.
Available Tools
12 toolssystemores_analyze_trace_telemetryAnalyze OpenTelemetry Agent Trace SpansARead-onlyIdempotentInspect
Ingests standard OpenTelemetry (OTel) trace JSON payloads to detect financial token cost burn traps (> $2.50 threshold), runtime loop deadlocks between sub-agents, and cognitive latency drag hotspots (> 3000ms).
Inputs: otelTraceJson (required), latencyThresholdMs, maxCostThresholdUsd.
systemores_assess_biasAssess Regulatory & Demographic BiasBRead-onlyInspect
Verifies the agent's compliance with fair-lending, fair-housing, employment non-discrimination (EEOC/SIOP/ECOA), or child-directed safety (COPPA) standards.
Inputs: systemPrompt (required), complianceDomain (required).
systemores_audit_agent_graphAudit Multi-Agent Execution TopologyBRead-onlyIdempotentInspect
Statically scans multi-agent execution topologies (DAGs/meshes) using DFS algorithms to detect cyclic delegation loops and privilege escalation paths from public untrusted sub-agents to backend write/admin tools.
Inputs: graphTopologyJson (required), maxDepth, strictPrivilegeCheck.
systemores_audit_tool_integrityAudit MCP Tool Definitions IntegrityARead-onlyIdempotentInspect
Audits the structural integrity, naming conventions, schema completeness, safety annotations, and injection surface of an AI agent's exposed tool definitions. Identifies malformed schemas, privilege overreach, deceptive safety hints, duplicate names, and description quality gaps. Operates entirely offline — no external API calls required.
Inputs: toolDefinitionsJson (required), strictMode. Returns: summary, findings, overallScore, toolsAudited, +1 more
systemores_audit_turn_liveLive Turn Audit (Systemores System One)ARead-onlyIdempotentInspect
Performs real-time (~250ms) operational and behavioral turn auditing using Systemores System One. Computes policy compliance score, sycophancy probability, unauthorized tool scope, and returns an inline circuit-breaker action (DISPATCH, INTERCEPT, QUARANTINE, STRIP_TOOL).
Inputs: userMessage (required), systemPrompt (required), agentResponse, proposedToolCall. Returns: engine, status, tokens, metrics, +4 more
systemores_evaluate_driftEvaluate Multi-Turn Behavioral DriftBRead-onlyInspect
Simulates multiple conversational turns to evaluate agent output consistency and behavioral drift over extended interactions.
Inputs: systemPrompt (required), turns, temperature.
systemores_export_dossierExport Regulatory Compliance DossierARead-onlyIdempotentInspect
Aggregates findings from graph audits, synthetic cohort simulations, chaos tests, and trace analytics into formal compliance report packages for EU AI Act (EU 2024/1689), NIST AI RMF 1.0, EEOC/ECOA, and SOC 2 AI Addendums.
Inputs: auditSessionId (required), companyName, targetFrameworks.
systemores_generate_cohortGenerate Synthetic IPIP-NEO-120 Persona CohortBRead-onlyInspect
Generates statistical cohorts of synthetic user personas across enterprise operational domains with IPIP-NEO-120 30-facet psychometric profiles, demographic diversity, and prompt injection payloads.
Inputs: domain (required), cohortSize, includeAdversarial.
systemores_inject_environment_faultGenerate Chaos Fault Injection PolicyARead-onlyInspect
Configures dynamic chaos injection policies for tools, mock APIs, and databases during simulations (HTTP 429 rate limits, 500 errors, timeouts, 401 unauthorized, malformed JSON).
Inputs: faultType (required), targetToolName (required), failureProbability.
systemores_measure_dragMeasure Cognitive Throughput DragCRead-onlyIdempotentInspect
Measures operational latency, response length, and execution drag parameters to analyze cognitive throughput stability within the Behavioral OS ecosystem.
Inputs: latencyMs (required), promptLength (required), responseLength (required).
systemores_stress_test_agentStress Test Agent Persona (Murray's Needs-Press)BRead-onlyInspect
Exposes the target agent persona to a battery of adversarial prompts (Presses) and evaluates behavioral stability using Murray's Needs-Press diagnostic model.
Inputs: role (required), systemPrompt (required), pressIntensity.
systemores_tool_integrityEvaluate System Prompt Tool DisciplineBRead-onlyInspect
Evaluates whether the agent's system prompt establishes the behavioral conditions for safe, reliable tool use — auditing tool selection discipline, argument construction fidelity, and failure resilience when tool returns are ambiguous or erroneous.
Inputs: systemPrompt (required), toolContext.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
Compliance MCP for AI agents: sanctions & KYT screening on 50+ chains, stablecoin-freeze, oracle.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.
Related MCP Servers
- AlicenseBqualityCmaintenancePre-execution governance for AI agents. 45 MCP tools for hold queues, audit trails, risk scoring, and policy enforcement. Validates agent actions before they execute.4575 npm1MIT
- AlicenseNot gradedqualityCmaintenanceMCP server providing immutable audit logging, policy enforcement, and compliance reporting for AI agent workflows, enabling regulatory compliance and chain integrity verification.1MIT
- AlicenseAqualityAmaintenanceAgent trust & data safety MCP: PII/secret redaction, email validation, sanctions screening, and OSV vulnerability checks for AI agents.4130MIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.