Aribot

This repository is a public manifest for the hosted server. It contains no product code — only the connection details. The server requires OAuth, so listing its address exposes nothing without an authorized login.

Unified threat modeling — one model, not five tools

Aribot buildsone threat model per systemand layers every discipline onto it —security(STRIDE + LINDDUN),cloudposture (AWS · Azure · GCP),compliance(NIST · ISO 27001 · SOC 2), and theeconomicsof each risk (value at risk, cost to fix, dollars saved once healed) — all kepttraceable end to end:

Threat → Requirement → Control → Framework → Code → Fix

Ask for any link in that chain, in either direction, with evidence behind every finding and every fix.

- Turn a diagram or a written description of a system into a full threat model
- STRIDE and LINDDUN coverage, generated per component and per data flow
- Threats mapped to the security controls, requirements, and compliance frameworks that address them
- A traceability view from each threat → finding → control → requirement → remediation
- Re-model as the design changes; link related diagrams and reuse component threat libraries

- Code security— static analysis of a connected repository
- Pipeline security— CI/CD configuration and supply-chain checks
- Cloud & compliance— posture checks across AWS, Azure, and GCP accounts
- SBOM— generate a software bill of materials
- Shadow AI & API discovery— find where AI/LLM use and API endpoints have spread across your estate

- Coverage and control status against NIST, ISO 27001, SOC 2, and other frameworks
- See which controls a threat model or scan already satisfies, and where the gaps are

- Assess a third party's posture and fold it into your own risk view

- Get a fix for a finding — as code, cloud configuration, or infrastructure-as-code
- Keep it advisory, or apply it (e.g. open a pull request or push a cloud change) under approval

Point any MCP client at the server and complete the OAuth prompt:

OAuth is discovered automatically athttps://mcp.aribot.ayurak.com/.well-known/oauth-authorization-server.

claude mcp add --transport http aribot https://mcp.aribot.ayurak.com/mcp

Each call is checked against your company's licence, the OAuth scopes you granted (read:findings,read:threatmodel,read:insights,run:scan,run:codereview,write:threatmodel,run:remediation), your team's roles, and your tenant boundary. Usage is metered, and every action is logged. So you can run security work from an assistant without losing track of who can do what, or which company's data is which.

generate_threat_model·verify_threats_in_code·get_traceability·get_framework_coverage·compliance_status·discover_shadow_ai·get_api_security·get_cloud_compliance·get_remediation·get_billing

© Ayurak / Aristiun. "Aribot" and "Ayurak" are trademarks of their owner. This manifest is provided for MCP discovery under the MIT License (seeLICENSE).

Transaction-complete hotel booking over MCP — 300K+ properties, real hotel confirmation numbers, loyalty points, secure checkout. Hotels are merchant of record. Builders set their own booking fee via Stripe Connect. Built on proven distribution infrastructure.

An MCP server for AI video generation. MCP server for AI video generation. Lets Claude, ChatGPT, OpenClaw , Hermes & other agents create AI videos and publish them to YouTube, TikTok, Instagram etc..

Institutional research and manager diligence reports on hedge funds, venture capital and private equity managers. Summary of filings, personnel changes, media screening and social signals delivered to you in minutes.

ALTER - identity infrastructure for the AI economy

D2C eCommerce fulfillment platform: manage orders, inventory, shipments, campaigns, and billing via AI agents

Apigene MCP Gateway is the runtime layer that connects AI agents to APIs and MCP servers via Model Context Protocol.

MCP to interface with multiple blockchains, staking, DeFi, swap, bridging, wallet management, DCA, Limit Orders, Coin Lookup, Tracking and more.

MCP server for Bitnovo Pay integration with AI agents. Provides cryptocurrency payment capabilities through Bitnovo Pay API. Features include payment creation, status checking, QR code generation, and webhook management with support for multiple tunnel providers (ngrok, zrok, manual).

Shop for gift cards, esims, phone topups. Pay with cards and crypto.