CISO Assistant MCP Server
Related Servers
Alternatives to CISO Assistant MCP Server
No user-submitted related servers found.
Related Servers
AlicenseAqualityCmaintenance102-tool MCP server for AI-native compliance. PII scanning, HIPAA/GDPR/PCI-DSS/SOX/CCPA automation, file intelligence, workflow execution, audit trails, security events, and team management.137 npmMIT- AlicenseNot gradedqualityDmaintenanceMCP server that integrates with ARXsec.io API to execute security scans, compliance checks, secrets management, and remediation actions with policy enforcement, audit logging, and human approval workflows.14 PyPIMIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server that exposes SOC2 and HIPAA compliance remediation logic as structured tools for AI agents to call, enabling an LLM-driven workflow to discover, assess, remediate, and report on compliance controls.MIT
- AlicenseAqualityDmaintenanceUnified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.4114MIT
- FlicenseNot gradedqualityFmaintenanceMCP server for AI agent compliance that screens actions before execution and records decisions in an immutable, SIEM-ready audit trail.34 npm-
- FlicenseNot gradedqualityCmaintenanceMCP server for IBM QRadar SIEM that consolidates 728 REST API endpoints into 4 intelligent tools, enabling natural language interaction for security tasks like managing offenses, assets, rules, and reference data.-
TDQS
Scored across 1567 tools
With 1567 tools, the surface contains dozens of near-identical entries per resource (list/retrieve/object_retrieve/create/update/partial_update/destroy) plus literal duplicates such as `document_attachments_retrieve` vs `document_attachments_retrieve_2`, `requirement_mapping_sets_graph_data_retrieve` vs `..._retrieve_2`, and the `ciso_assistant_serdes_*` tools duplicated with and without the `api_` prefix. Many descriptions are boilerplate ('API endpoint that allows X to be viewed or edited', 'Generic export mixin for CSV/XLSX exports', 'Perform a batch action on multiple objects') and therefore give no signal for choosing between `retrieve`, `object_retrieve`, `list`, or the resource-specific variants. An agent cannot reliably distinguish e.g. `applied_controls_*` from `policies_*`, which expose identical sub-endpoints.
The bulk follows a mechanical `ciso_assistant_api_<resource>_<action>_<httpverb>` pattern, but it is broken by exceptions: bare `ciso_ingest`, `ciso_assistant_api_request`, a second prefix-less `ciso_assistant_serdes_*` family, numeric disambiguation suffixes (`_retrieve_2`), and action segments that mix resource actions with HTTP verbs (`batch_action_create`, `publish_draft_preview_create`). Names are also extremely long, making near-identical entries hard to scan apart.
1567 tools is two orders of magnitude beyond a usable agent-facing surface; nearly every endpoint is exposed as a separate tool, including per-field choice endpoints (`..._category_retrieve`, `..._severity_retrieve`) and pure chart-data endpoints. This is a raw API dump rather than a curated tool set.
Coverage is technically exhaustive — full CRUD, exports, analytics, settings, auth, and a generic `ciso_assistant_api_request` escape hatch mean almost no operation is unreachable. However, the surface is not meaningfully usable as a tool set, so 'completeness' here is achieved by brute force rather than by a coherent, navigable lifecycle.