Aribot is an MCP server with 16 tools an agent can call, among them apply_remediation, code_review_scan, compliance_scan. It answers at https://mcp.aribot.ayurak.com/ over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 10 of 10 times since 4 September 2026; the last check, on 18 October 2026, succeeded.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
apply_remediation | Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than a Inputs: threat_id, rule_id, resource_context |
code_review_scan | Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix. Inputs: scan_id |
compliance_scan | Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll. Inputs: scan_type, account_id, diagram_id, frameworks, severity_filter, simulation_mode |
compliance_status | Company-level compliance posture rollup (pass rate, control compliance, mitigated counts, per-framework coverage). Suitable for a CI gate. Wraps the traceability company rollup. Inputs: scan_id, diagram_id |
discover_shadow_ai | Shadow-AI posture (part of Code Security): unsanctioned / unknown AI-service usage discovered in code — totals, risk score, provider/type breakdown, hardcoded-key count, and top discoveries. Company latest, or one scan with `scan_id`. Reads Inputs: scan_id, limit |
generate_threat_model | Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id. Inputs: name, nodes, edges |
get_api_security | API security inventory (part of Code Security): discovered API endpoints with authentication status, risk level and risk factors, plus method/risk breakdowns. Company-wide or one scan with `scan_id`. Reads code_review ApiEndpointDiscovery. Inputs: scan_id, limit |
get_billing | Billing status + self-service payment for your company: credit-wallet balance, pay-per-use flag, license tier / annual commitment, per-action prices, purchasable plans, and any approved-but-unpaid plans. Pass `checkout_request_id` to get a Inputs: checkout_request_id, topup_amount, request_plan |
get_cloud_compliance | Cloud security & compliance posture (Cloud Compliance): per connected cloud account, the latest CIS/NIST cloud-policy scan — compliance %, failing policies/records, status — plus a company rollup. Reads customers.Account.latest_scan -> comp Inputs: account_id |
get_diagram_summary | The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage. Inputs: diagram_id |
get_framework_coverage | Compliance-framework coverage for a diagram (real, ControlCodeMap-backed), optionally for one framework, plus an optional crossmap relationship graph. Wraps derive_framework_coverage + crossmap_cypher.build_graph. Inputs: diagram_id, framework, include_graph |
get_insights | Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists. Inputs: diagram_id |
get_remediation | Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps. Inputs: threat_id, rule_id, resource_context |
get_traceability | Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics. Inputs: scan_id |
onboard_agents | Bulk-onboard agent identities to the governed fleet (Agent Governance). Accepts plain ids or {agent_id} descriptors in `agents`, A2A 1.0 Agent Cards in `agent_cards` (name/url/provider/version/protocolVersion), or MCP client descriptors, un Inputs: agents, agent_cards, cohort, auto_suspend_threshold |
verify_threats_in_code | Verify whether threats are mitigated in a scan's uploaded code. With `threat_id`, verifies one threat synchronously and returns the verdict; without it, verifies every diagram threat in the background. Wraps code_review ThreatVerificationSe Inputs: scan_id, threat_id, repository_id, code_content, async_ |
Every block below points at https://mcp.aribot.ayurak.com/. Pick your client and copy.
claude mcp add --transport http aribot https://mcp.aribot.ayurak.com/
{
"mcpServers": {
"aribot": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.aribot.ayurak.com/"]
}
}
}{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/"
}
}
}{
"servers": {
"aribot": {
"type": "http",
"url": "https://mcp.aribot.ayurak.com/"
}
}
}{
"context_servers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/"
}
}
}{
"mcpServers": {
"aribot": {
"serverUrl": "https://mcp.aribot.ayurak.com/"
}
}
}{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/"
}
}
}name: Aribot
version: 0.0.1
schema: v1
mcpServers:
- name: Aribot
type: streamable-http
url: https://mcp.aribot.ayurak.com/{
"mcpServers": {
"aribot": {
"httpUrl": "https://mcp.aribot.ayurak.com/"
}
}
}{
"mcpServers": {
"aribot": {
"type": "http",
"url": "https://mcp.aribot.ayurak.com/"
}
}
}{
"mcpServers": {
"aribot": {
"url": "https://mcp.aribot.ayurak.com/"
}
}
}goose://extension?url=https%3A%2F%2Fmcp.aribot.ayurak.com%2F&type=streamable_http&id=aribot&name=Aribot
It answered our last check on 18 October 2026 in 429 ms. Over 10 checks since 4 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by ayurak.com and served from mcp.aribot.ayurak.com, the vendor's own domain: https://mcp.aribot.ayurak.com/.
16, as returned by the server's own tools/list on 10 September 2026: apply_remediation, code_review_scan, compliance_scan, compliance_status, discover_shadow_ai, generate_threat_model, get_api_security, get_billing, and 8 more.
It answered our last check on 18 October 2026 in 429 ms. Over 10 checks since 4 September 2026 it answered 10.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.aribot.ayurak.com/. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: com.ayurak. Endpoint host: mcp.aribot.ayurak.com. ARD identifier: urn:air:com.ayurak:mcp:aribot-mcp.
First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.