{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_h9pc2zp7dmy2","handle":"mcp-cybersec-watchdog","url":"https://wellknown.network/agents/mcp-cybersec-watchdog","links":{"self":"https://wellknown.network/agents/mcp-cybersec-watchdog/record.json","html":"https://wellknown.network/agents/mcp-cybersec-watchdog","markdown":"https://wellknown.network/agents/mcp-cybersec-watchdog/record.md","api":"https://wellknown.network/api/v1/agents/mcp-cybersec-watchdog","status":"https://wellknown.network/api/v1/agents/mcp-cybersec-watchdog/status","claim":"https://wellknown.network/agents/mcp-cybersec-watchdog/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-cybersec-watchdog/claim.json","badge":"https://wellknown.network/agents/mcp-cybersec-watchdog/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-cybersec-watchdog/history","tools":"https://wellknown.network/api/v1/agents/mcp-cybersec-watchdog/tools"},"ard":{"identifier":"urn:air::server:mcp-cybersec-watchdog","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-cybersec-watchdog","summary":"Cybersecurity monitoring and analysis for Linux servers via MCP","description":"# 🐕 MCP Cybersec Watchdog\n\n**Complete Linux security audit in 30 seconds** via Claude MCP. Zero configuration required.\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)\n[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)\n[![Tests](https://github.com/girste/mcp-cybersec-watchdog/actions/workflows/test.yml/badge.svg)](https://github.com/girste/mcp-cybersec-watchdog/actions/workflows/test.yml)\n[![codecov](https://codecov.io/gh/girste/mcp-cybersec-watchdog/branch/main/graph/badge.svg)](https://codecov.io/gh/girste/mcp-cybersec-watchdog)\n[![PyPI](https://img.shields.io/badge/PyPI-mcp--cybersec--watchdog-blue)](https://pypi.org/project/mcp-cybersec-watchdog/)\n[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)\n\n## Features\n\n**One-Time Audit (23 analyzers, 89 CIS controls)**\n- Firewall, SSH, fail2ban, Docker, SSL certificates\n- CVE scanning, container image scanning (trivy)\n- Compliance: CIS Benchmark, NIST 800-53, PCI-DSS v4.0\n- Kernel hardening, MAC (AppArmor/SELinux), rootkit detection\n- Multi-level scoring (personal/business/corporate/military)\n\n**Live Monitoring (Beta)**\n- Background daemon with anomaly detection\n- Alerts on firewall changes, new ports, attack spikes, compliance drift\n- AI analysis only when needed (token-efficient)\n\n## Quick Start\n\n```bash\n# Install\npip install mcp-cybersec-watchdog\n\n# Setup passwordless sudo (required)\nbash <(curl -s https://raw.githubusercontent.com/girste/mcp-cybersec-watchdog/main/setup-sudo.sh)\n\n# Run audit\nmcp-watchdog test\n\n# Start monitoring (checks every hour)\nmcp-watchdog monitor\n```\n\n## Claude Desktop Integration\n\nAdd to `~/Library/Application Support/Claude/claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"cybersec-watchdog\": {\n      \"command\": \"/path/to/venv/bin/mcp-watchdog\"\n    }\n  }\n}\n```\n\n**Example prompts:**\n```\nRun a security audit on this server\nStart monito…","publisher":null,"homepage":"https://github.com/girste/mcp-cybersec-watchdog","repository":"https://github.com/girste/mcp-cybersec-watchdog","version":"0.1.0","license":null,"protocols":["mcp"],"tags":["mcp","security","audit","linux","server"],"pricing":null,"endpoints":[{"url":"pypi:mcp-cybersec-watchdog","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"ai.evaluation","name":"Evaluation & Benchmarks","confidence":0.825,"provenance":"derived"}],"categories":["ai"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-cybersec-watchdog","registry":"pypi","observedAt":"2026-10-28T10:24:34.975Z","publishedAt":"2026-01-07T23:52:30.082119Z","latestVersion":"0.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-cybersec-watchdog","url":"https://pypi.org/project/mcp-cybersec-watchdog/","firstSeenAt":"2026-09-10T01:19:49.620Z","fetchedAt":"2026-10-28T10:23:55.223Z","normalizedAt":"2026-10-28T10:23:55.223Z"}]},"firstSeenAt":"2026-09-10T01:19:49.620Z","updatedAt":"2026-10-28T10:24:34.975Z"}