{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_td4j7sagb8ns","handle":"iflow-mcp-zilbonn-owasp-wstg-rag","url":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag","links":{"self":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag/record.json","html":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag","markdown":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag/record.md","api":"https://wellknown.network/api/v1/agents/iflow-mcp-zilbonn-owasp-wstg-rag","status":"https://wellknown.network/api/v1/agents/iflow-mcp-zilbonn-owasp-wstg-rag/status","claim":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag/claim.json","badge":"https://wellknown.network/agents/iflow-mcp-zilbonn-owasp-wstg-rag/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/iflow-mcp-zilbonn-owasp-wstg-rag/history","tools":"https://wellknown.network/api/v1/agents/iflow-mcp-zilbonn-owasp-wstg-rag/tools"},"ard":{"identifier":"urn:air::server:iflow-mcp-zilbonn-owasp-wstg-rag","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"iflow-mcp_zilbonn-owasp-wstg-rag","summary":"A Retrieval-Augmented Generation (RAG) system that indexes the OWASP Web Security Testing Guide (WSTG) into a vector database, providing instant access to security testing methodologies via MCP (Model Context Protocol) for Claude Code integration.","description":"# OWASP WSTG RAG\n\nA Retrieval-Augmented Generation (RAG) system that indexes the **OWASP Web Security Testing Guide (WSTG)** into a vector database, providing instant access to security testing methodologies via REST API and MCP (Model Context Protocol) for Claude Code integration.\n\n## Features\n\n- **Complete WSTG Coverage** - All 12 WSTG testing categories indexed and searchable\n- **Semantic Search** - Find relevant testing methodologies using natural language queries\n- **MCP Integration** - Direct integration with Claude Code for AI-assisted penetration testing\n- **REST API** - HTTP endpoints for programmatic access\n- **WSTG ID Lookup** - Retrieve complete test cases by WSTG identifier (e.g., `WSTG-INPV-05`)\n\n## WSTG Categories\n\n| Category | WSTG ID | Description |\n|----------|---------|-------------|\n| Information Gathering | WSTG-INFO | Fingerprinting, enumeration, mapping |\n| Configuration | WSTG-CONF | Server/platform configuration testing |\n| Identity Management | WSTG-IDNT | User registration, account provisioning |\n| Authentication | WSTG-ATHN | Login, password policy, MFA testing |\n| Authorization | WSTG-ATHZ | Privilege escalation, IDOR, access control |\n| Session Management | WSTG-SESS | Session tokens, cookies, fixation |\n| Input Validation | WSTG-INPV | SQLi, XSS, command injection, SSTI |\n| Error Handling | WSTG-ERRH | Error messages, stack traces |\n| Cryptography | WSTG-CRYP | TLS, encryption, hashing |\n| Business Logic | WSTG-BUSL | Workflow bypass, file upload |\n| Client-Side | WSTG-CLNT | DOM XSS, clickjacking, WebSockets |\n| API Testing | WSTG-APIT | REST, GraphQL, API security |\n\n## Quick Start\n\n### 1. Install Dependencies\n\n```bash\ncd RAG_runner\npip install -r requirements.txt\n```\n\n### 2. Build the Database\n\n```bash\npython3 build_database.py\n```\n\nThis will:\n- Parse all OWASP WSTG HTML files\n- Create semantic chunks for retrieval\n- Build the ChromaDB vector database\n\n### 3. Start the Server\n\n```bash\npython3 -m server.http_server\n```\n\nServer runs …","publisher":null,"homepage":"https://github.com/zilbonn/OWASP-WSTG-Rag#readme","repository":"https://github.com/zilbonn/OWASP-WSTG-Rag#readme","version":"0.1.0","license":"Creative Commons Attribution-ShareAlike 4.0","protocols":["mcp"],"tags":["mcp","owasp","rag","security","web-security-testing","wstg"],"pricing":null,"endpoints":[{"url":"pypi:iflow-mcp_zilbonn-owasp-wstg-rag","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"code.testing","name":"Testing","confidence":1,"provenance":"derived"},{"slug":"data.vector-search","name":"Vector Search","confidence":1,"provenance":"declared"},{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"derived"},{"slug":"data.apis","name":"API Access","confidence":0.814,"provenance":"derived"}],"categories":["code","data","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"iflow-mcp_zilbonn-owasp-wstg-rag","registry":"pypi","observedAt":"2026-11-09T11:26:08.807Z","publishedAt":"2026-02-10T22:23:47.135165Z","latestVersion":"0.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"iflow-mcp_zilbonn-owasp-wstg-rag","url":"https://pypi.org/project/iflow-mcp_zilbonn-owasp-wstg-rag/","firstSeenAt":"2026-09-09T21:25:25.098Z","fetchedAt":"2026-11-09T11:24:43.333Z","normalizedAt":"2026-11-09T11:24:43.333Z"}]},"firstSeenAt":"2026-09-09T21:25:25.098Z","updatedAt":"2026-11-09T11:26:08.807Z"}