Riskscore
About
Security awareness for AI agents — so your agent knows what's dangerous before it acts. Powered by CVE, NVD, CISA KEV, and OSV.dev vulnerability data with 196 credential detection rules, returning allow/warn/block decisions in real time. Stop your agent from running vulnerable de
Details
- Author
- ItIsCuthNotCup
- Downloads
- 255
- Categories
- Developer Tools, Security, AI
Jump to
- Real-time allow, warn, or block decisions.
- Powered by CVE, NVD, CISA KEV, and OSV.dev data.
- 196 credential detection rules for secret leakage.
- Focused on AI agent safety and proactive risk awareness.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
RiskscoreCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
The README does not provide installation or configuration instructions. Invoke Riskscore to evaluate an agent’s intended action and receive an allow/warn/block decision based on current vulnerability and credential data.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"riskscore": {
"riskscore": {
"command": "python",
"args": [
"mcp/server.py"
],
"env": {
"RISKSCORE_API_KEY": "your_key_here",
"RISKSCORE_BASE_URL": "https://riskscore2.p.rapidapi.com"
}
}
}
}
}McpServers
{
"riskscore": {
"command": "python",
"args": [
"mcp/server.py"
],
"env": {
"RISKSCORE_API_KEY": "your_key_here",
"RISKSCORE_BASE_URL": "https://riskscore2.p.rapidapi.com"
}
}
}Security awareness for AI agents — so your agent knows what's dangerous before it acts. Powered by CVE, NVD, CISA KEV, and OSV.dev vulnerability data with 196 credential detection rules, returning allow/warn/block decisions in real time. Stop your agent from running vulnerable dependencies, leaking secrets, or accidentally deleting your filesystem.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
