Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Authorization not required → required, Bearer, issuer https://api.aribot.ayurak.com
Changed the definition of "comment_threat_on_change", "compliance_status", "generate_architecture" and 16 more
{"destructiveHint":falsetrue,"openWorldHint":true,"readOnlyHint":false,"title" ⟨7 unchanged words⟩
{"destructiveHint":false,"openWorldHint":false,"readOnlyHint":true,"title":"Get Compliance Status"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":false,"title":"Generate architecture ⟨5 unchanged words⟩
{"destructiveHint":false,"idempotentHint":false,"openWorldHint":truefalse,"readOnlyHint":false,"title":"Generate Threat Model"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get governed AI agents"}
{"destructiveHint":false,"openWorldHint":false,"readOnlyHint":true,"title":" ⟨4 unchanged words⟩
{"destructiveHint":false,"openWorldHint":false,"readOnlyHint":true,"title":" ⟨4 unchanged words⟩
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get code-security findings"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get a diagram summary"}
{"destructiveHint":false,"openWorldHint":false,"readOnlyHint":true,"title":"Get Framework Coverage"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get diagram insights"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get Remediation Guidance"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get self-healing activity"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get shadow-AI discoveries"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Get tickets for threats"}
{"destructiveHint":false,"openWorldHint":false,"readOnlyHint":true,"title":"Get Traceability Matrix"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"List threat-model diagrams"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"List ticket destinations"}
{"destructiveHint":false,"openWorldHint":truefalse,"readOnlyHint":true,"title":"Audit architecture ⟨5 unchanged words⟩
Changed the definition of "generate_architecture"
⟨13 unchanged words⟩ regulatory control mappings directly from a natural-language description. Runs in the background (a few minutes); returns the name the diagram is saved under.
Added "get_agent_governance", "get_code_findings", "get_self_healing" and 2 more; changed the definition of "apply_remediation", "assign_threat", "comment_threat_on_change" and 11 more (24 tools before, 29 now)
Apply a remediation for real (mode=live).RoutedGoes throughthe fullAribot's governancefunnel — patentchecksreachability/kill-chain(attack-pathgatesreachability, autonomy policy and the approvalflow.flow). If your policy requires approval it returns 'requires_approval' rather than acting.
Authorization not required, issuer https://api.aribot.ayurak.com
Changed the definition of "get_api_security", "get_billing", "get_cloud_compliance" and 2 more
before
—after
Get API security inventorybefore
—after
{"openWorldHint":false,"readOnlyHint":true,"title":"Get API security inventory"}before
—Billing and plans
Added "assign_threat", "comment_threat_on_change", "file_threat_tickets" and 3 more (18 tools before, 24 now)
Assign a threat — Set the owner and due date of a threat entry; the linked ticket follows. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. Do not resend filed_unrecorded or outcome_unknown items without checking the tracker; resend not_attempted items to continue.
Comment on a pull request about threats — For a completed pipeline scan of a pull request: post, or update, one comment per threat whose linked code the pull request changes. A re-run with nothing changed makes no calls. Returns each comment's status (posted, updated, skipped with the reason, failed). Public repositories are skipped with the reason 'public repository'. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachabl…
Send threats to a tracker — Send 1-50 threat report entries to the tracker their route points at (or `destination`). One ticket per threat per report; a repeat returns already_filed. dry_run=true returns the exact tickets without sending; a preview with public_repository=true goes to a public repository, visible to anyone. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. Do not resend fil…
Authorization not required, issuer https://api.aribot.ayurak.com
Recently observed → Live
Live → Recently observed
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Added "generate_architecture" and "run_ai_governance_audit" (16 tools before, 18 now)
Generate architecture & threat model from prompt — Generate a multi-tier cloud/AI architecture and auto-synthesize STRIDE/LINDDUN threat models, security requirements, and regulatory control mappings directly from a natural-language description.
Audit architecture or scan against AI regulations — Audit an architecture diagram or code scan against statutory AI governance frameworks (EU AI Act 2024, EU DORA 2022, NIST AI RMF 1.0, ISO 42001). Evaluates article-by-article conformity, satisfied controls, open gaps, and generates actionable remediation guidance.
Recently observed → Live
Live → Recently observed
Changed the definition of "compliance_status", "discover_shadow_ai", "get_framework_coverage" and 1 more
Company-level compliance posture rollup across all frameworks (passEUrate,AIcontrolAct,complianceDORA,mitigatedNIST,countsISO,per-frameworkSOCcoverage2).Suitable
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Recently observed → Live
Live → Recently observed
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Recently observed → Live
Live → Recently observed
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Authorization not required, issuer https://api.aribot.ayurak.com
Recently observed → Live
Certificate recorded, valid to 2026-11-22
Authorization not required, issuer https://api.aribot.ayurak.com
Live → Recently observed
First tool surface recorded: 16 tools (server version 1.0.0)
Showing the latest 35 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨29 unchanged words⟩ , outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported.Dofiled_unrecordednotandresendoutcome_unknownfiled_unrecordedmeanortheoutcome_unknownticketitemsmaywithoutalreadycheckingexist in the tracker;resendnot_attempteditemsmeanstothecontinue.item was not sent.
⟨67 unchanged words⟩ , outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported.Dofiled_unrecordednotandresendoutcome_unknownfiled_unrecordedmeanortheoutcome_unknownticketitemsmaywithoutalreadycheckingexist in the tracker;resendnot_attempteditemsmeanstothecontinue.item was not sent.
Company-level compliance posture:rollupper-frameworkacrosspostureallfromframeworksthe(EUdailyAIcloudAct,scansDORA,(checksNISTpassed/failed,ISOcontrols tested/failing),SOCplus2threat and control metrics from code scans. Pass `framework` (e.g. 'ISO 27001')suitabletoforgetCIthatgatesframework'sandmost-failingexecutivecontrols.reporting.Rates are percentages (0-100).
⟨7 unchanged words⟩ id filter","type":"string"},"framework":{"description":"Optional framework name or id, e.g. 'ISO 27001', 'NIST'","type":"string"},"scan_id":{"description":"Optional scan id filter ⟨5 unchanged words⟩
⟨59 unchanged words⟩ , outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported.Dofiled_unrecordednotandresendoutcome_unknownfiled_unrecordedmeanortheoutcome_unknownticketitemsmaywithoutalreadycheckingexist in the tracker;resendnot_attempteditemsmeanstothecontinue.item was not sent.
⟨6 unchanged words⟩ normalized architecture (ReactFlow nodes + edges).Ingests componentsAribotviastores thesharedcomponentsStage-0andservice;generates thepipeline then auto-generatesthreats. Returns the diagram id.
⟨19 unchanged words⟩ method/risk breakdowns. Company-wide or one scan with `scan_id`.Reads code_review ApiEndpointDiscovery.
⟨58 unchanged words⟩ request for super-admin approval — never grants).UseReturnsthisthetodetailsviewneededortoRESOLVEresolve a 402without(licenceleavingorthecreditconnector.required).
⟨10 unchanged words⟩ account, the latest CIS/NIST cloud-policy scan — daily-scan posture (checks passed/failed) and the last manual scan's compliance %, failing policies/records,status— plus a company rollup.Reads customers.Account.latest_scan -> compliances.ScanResults.
The canonical diagram summarySummaryeveryofbadge/card/headerareadsdiagram: threat counts by severity, risk value, compliance and framework coverage.
Getreal ControlCodeMap-backedcontrol-mapped coverage percentages, gap counts, and mapped controls ⟨13 unchanged words⟩
Threat/control matrixCode-security metrics+ framework coveragefor a diagram,:joinedthewiththreat → finding → control metrics of its latest code-securityscanscan. code_scan is null whenonetheexists.diagram has no scan yet.
Compute a remediation plan for athreat/findingthreatWITHOUTor finding without applying it (mode=dry_rundry run). Runsthe sameAribot's governedengine as apply_remediation, including the patentremediationgates,checks and returns the proposed steps.
{"additionalProperties":false,"properties":{"resource_context":{"description":"provider/resource_id/region/account_id/metadataThe cloud resource: provider, resource_id (required), region, account_id, metadata","type":"object"},"rule_id":{ ⟨14 unchanged words⟩ string"}},"required":["threat_id","rule_id","resource_context"],"type":"object"}
⟨46 unchanged words⟩ , outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported.Dofiled_unrecordednotandresendoutcome_unknownfiled_unrecordedmeanortheoutcome_unknownticketitemsmaywithoutalreadycheckingexist in the tracker;resendnot_attempteditemsmeanstothecontinue.item was not sent.
Get governed AI agents — Your governed AI-agent fleet: each agent's id, name, cohort, whether it is active, its execution state (running, held, suspended), deviation score and the reason for any hold. Totals by state.
Get code-security findings — Findings from a code-security scan (SAST, secrets, dependencies): title, severity, file and line, CWE/OWASP category, status and the recommended fix. Latest completed scan when scan_id is omitted.
Get self-healing activity — Remediation (self-healing) history: each planned or applied fix with its threat, rule, resource, mode (dry run or live), status and outcome, plus whether autonomous live remediation is switched on for your company.
Get shadow-AI discoveries — AI usage found in your code and network traffic: provider, service type, model, endpoint, where it was found, risk level, classification and whether a hard-coded key was seen. Company-wide, or one scan with scan_id.
List threat-model diagrams — List your company's threat-model diagrams (id, name, last update), newest first, optionally filtered by part of the name.
before
—after
{"destructiveHint":false,"openWorldHint":true,"readOnlyHint":false,"title":"Billing and plans"}before
—after
Get cloud compliance posturebefore
—after
{"openWorldHint":false,"readOnlyHint":true,"title":"Get cloud compliance posture"}before
—after
Onboard agents to governancebefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":false,"title":"Onboard agents to governance"}{"destructiveHint":false,"openWorldHint":true,"readOnlyHint":truefalse,"title":"Verify Threats in Code"}
Get tickets for threats — Tickets (tracker, number, state, assignee) for the given threat entries, or for a diagram.
List ticket destinations — Trackers, routes and destinations this caller may send threats to (no credentials).
Sync ticket status now — Pull the current state and assignee of this company's open tickets (max 50 per call, time-boxed). Returns {checked, changed, errors, remaining}; remaining > 0 means call again to continue. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. Do not resend filed_unrecorded or outcome_unknown items without checking the tracker; resend not_attempted items to continue.
⟨3 unchanged words⟩ :{"diagram_id":{"description":"Optional diagramto add framework coverageidforfilter","type":"string"},"scan_id":{"description":"Optionalanchor scan; latest is usedscanifidomittedfilter","type":"string"}},"required": ⟨2 unchanged words⟩
before
—after
Discover Shadow AI & APIsShadow-AI posture (part of Code Security): unsanctioned /ScanunknownconnectedAI-servicerepositoriesusageanddiscoverednetworkintrafficcodefor—unmanagedtotalsLLMs,risk score,foundationalprovider/typemodelbreakdownendpoints,hardcoded-keyvectorcountdatabases,and top discoveries. Companyagentlatestframeworks,or one scan withand`scan_id`.leakedReadsAPIcode_reviewkeysShadowAIReport/ShadowAIDiscovery.(async).
{"additionalProperties":false,"properties":{"limit":{"default":15,"description":"Max discoveries to return","type":"integer"},"scan_id":{"description":"OptionalScanCodeReviewScanidid;withcompany-wideuploadedlatestcodeiforomittedrepository","type":"string"}},"required":["scan_id"],"type":"object"}
before
—after
{"destructiveHint":false,"openWorldHint":true,"readOnlyHint":false,"title":"Discover Shadow AI & APIs"}Compliance-framework coverageGetforrealaControlCodeMap-backeddiagramcoverage(realpercentages,ControlCodeMap-backed)gap counts,optionallyand mapped controls foroneEUframework,AIplusAct,anDORA,optionalNISTcrossmapAIrelationshipRMF,graph.ISOWraps27001,derive_framework_coverageSOC+2,crossmap_cypher.build_graph.etc.
{"additionalProperties":false,"properties":{"diagram_id":{"description":"Diagrampk or uuidid/uuid","type":"string"},"framework":{"description":"Optional framework filter (e.g.'NIST-800-53'eu-ai-act,'SOC2'dora, nist, iso)","type":"string"},"include_graph":{"default":false,"description":"Also return theInclude crossmapnode/edgerelationship graph","type":"boolean"}},"required ⟨3 unchanged words⟩
Verify whether modelled STRIDE/LINDDUN threats are mitigated in a scan's uploadedcode. Withcode`threat_id`,orverifiesAST.oneIfthreatthreat_idsynchronouslyisandprovided, returnsthesynchronous verdict;without it, verifies every diagramotherwisethreatdispatchesinbatchtheverificationbackground.acrossWrapsallcode_reviewdiagramThreatVerificationService.threats.
{"additionalProperties":false,"properties":{"async_":{"default":true,"type":"boolean"},"code_content":{"description":"Optional inline codecontextsnippet to verify","type":"string"},"repository_id":{"description":"Optionalconnected repo to fetch coderepositoryfromid","type":"string"},"scan_id":{"description":"CodeReviewScanCodeidreview(uuid)scan id","type":"string"},"threat_id":{"description":"Optional:a singlespecific threatidid/codeortocodeverify","type":"string"}},"required": ⟨3 unchanged words⟩