{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_wtyj3d5xetrn","handle":"atk-security-checks","url":"https://wellknown.network/agents/atk-security-checks","links":{"self":"https://wellknown.network/agents/atk-security-checks/record.json","html":"https://wellknown.network/agents/atk-security-checks","markdown":"https://wellknown.network/agents/atk-security-checks/record.md","api":"https://wellknown.network/api/v1/agents/atk-security-checks","status":"https://wellknown.network/api/v1/agents/atk-security-checks/status","claim":"https://wellknown.network/agents/atk-security-checks/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/atk-security-checks/claim.json","badge":"https://wellknown.network/agents/atk-security-checks/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/atk-security-checks/history","tools":"https://wellknown.network/api/v1/agents/atk-security-checks/tools"},"ard":{"identifier":"urn:air:atkvn.com:server:atk-security-checks","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"ATK Security Checks","summary":"PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps","description":"PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps","publisher":{"name":"com.atkvn","url":null},"homepage":"https://atkvn.com/agent/","repository":null,"version":"0.3.1","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://atkvn.com/agent/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-23T07:23:38.618112Z","publishedAt":"2026-10-23T07:23:38.618112Z","registryName":"com.atkvn/security-checks"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":0.807,"provenance":"derived"},{"slug":"finance.markets","name":"Markets & Trading","confidence":0.525,"provenance":"derived"}],"categories":["code","finance"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 3h ago.","lastOkAt":"2026-10-27T03:24:01.384Z","lastProbedAt":"2026-10-27T03:24:01.384Z","statusComputedAt":"2026-10-27T03:25:22.982Z","reliability30d":{"probes":8,"successRate":1,"p50Ms":28,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":8,"ok":8,"authBoundaryOk":0,"serviceOk":8,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-27T03:24:01.384Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":23,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-26T20:29:48.834Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":22,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-26T13:29:46.754Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":54,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-26T06:26:24.408Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":33,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-25T23:24:51.280Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":23,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-25T16:26:45.279Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":34,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-25T09:29:54.403Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":23,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-25T02:26:39.778Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":43,"error":null,"detail":{"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"toolCount":5,"toolsHash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","serverName":"atk-security-checks","capabilities":["prompts","resources","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"check_post_quantum_tls","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS "},{"name":"check_tls_certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and "},{"name":"audit_wazuh_rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or coll"},{"name":"test_wazuh_rule","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rul"},{"name":"check_php2shell","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evid"}],"package":null,"toolSurface":{"id":"ts_xhqqbr99trc6","endpointId":"ep_7usaab9qjd8r","hash":"4086603ef71ee29522f636ba08cacf0abf0fba9ca3e18ec40f5387078cf40200","toolCount":5,"serverName":"atk-security-checks","serverVersion":"0.3.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-25T02:26:39.793Z","lastSeenAt":"2026-10-27T03:24:01.425Z","observations":8,"toolNames":["check_post_quantum_tls","check_tls_certificate","audit_wazuh_rules","test_wazuh_rule","check_php2shell"],"distinctSurfaces":1},"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"com.atkvn/security-checks","url":"https://registry.modelcontextprotocol.io/v0/servers/com.atkvn%2Fsecurity-checks","firstSeenAt":"2026-10-25T01:18:57.624Z","fetchedAt":"2026-10-25T01:18:57.624Z","normalizedAt":"2026-10-25T01:18:57.624Z"}]},"firstSeenAt":"2026-10-25T01:18:57.624Z","updatedAt":"2026-10-27T03:26:08.744Z"}