MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

MCP server · Code & DevOps

Security Recipes

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

Checks passed
13 / 22

2 failed · 7 not measured

Median response
1320 ms

Median of successful probes over 7 days

30-day uptime
Not measured

Share of countable probes over 30 days, including daily rollups. Auth challenges are excluded.

Discovered tools
75

Tool definitions returned by this server

Independent monitoring

Health & checks

Status history

Responded

The server completed its last measured handshake. This is an observation, not a guarantee.

Last checked
Check summary by test group
Test areaPassedFailedUnmeasured
ConnectionCan a client connect and discover tools?
500
Reliability & speedDoes it respond consistently and quickly?
103
Access & authenticationWhat is required to use this server?
102
Tool qualityAre the tool definitions usable by an agent?
220
Publisher identityCan the publisher be traced to its source?
402

Unmeasured means there is not enough evidence to decide. How these checks work

Inspect individual checks 22 recorded

Core

  • Pass
    Reachable

    Latest probe returned HTTP 200 in 895 ms.

  • Pass
    Valid handshake

    protocolVersion 2025-11-25, serverInfo.name security-recipes-mcp.

  • Pass
    Lists tools

    tools/list returned 75 tools.

  • Pass
    Current protocol

    Negotiated 2025-11-25. The bar is 2025-06-18 or newer.

  • Pass
    HTTPS

    The endpoint URL is https.

Performance

  • Not measured
    Fast (p50)

    Median latency 1320 ms over 2 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.

  • Not measured
    Consistent (p95)

    95th percentile 1703 ms over 2 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.

  • Not measured
    Reliable (uptime)

    2 of 2 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.

  • Pass
    Stable tool list

    No tool was removed and no required parameter was added in the last 30 days.

Access

  • Pass
    Open access

    tools/list succeeded with no credential, and the record declares none.

  • Not measured
    Standard auth

    Auth is not required, so the OAuth metadata check does not apply.

  • Not measured
    Free tier cited

    No publisher quote has been checked.

Tools

  • Pass
    Tools described

    Every tool description is at least 20 characters.

  • Pass
    Valid input schemas

    Every inputSchema is a JSON Schema object.

  • Fail
    Parameters documented

    0 of 305 parameters have a description (0%). The bar is 80%.

  • Fail
    Safety hints

    75 tools set neither readOnlyHint nor destructiveHint.

Publisher

  • Pass
    Verified namespace

    Listed in the Official MCP Registry.

  • Not measured
    Website matches publisher

    This namespace is not a reverse domain, so the website comparison does not apply.

  • Pass
    Source repo linked

    A repository URL is on file.

  • Pass
    Repo owner matches

    The GitHub repository owner matches the namespace login.

  • Pass
    Recently updated

    Updated 2026-08-26T22:07:50.723665Z, within 180 days.

  • Not measured
    Open-source licence

    The GitHub licence lookup has not returned an OSI result yet.

Start using Security Recipes

Connect to this server

Choose your client, copy the configuration, then enable the server in your client’s MCP settings.

Run this command in your terminal, then restart Claude Code.

Claude Code

claude mcp add --transport http security-recipes https://security-recipes.ai/mcp

Capabilities

Tools 75

recipes_a2a_agent_card_trust_profile

Return A2A Agent Card intake profiles, trust controls, and sample decisions.

Discovered
recipes_agent_capability_risk_register

Return capability-based residual risk scores for agentic workflows.

Discovered
recipes_agent_handoff_boundary_pack

Return agent handoff boundary profiles, protocol controls, and workflow maps.

Discovered
recipes_agent_identity_ledger

Return agent non-human identity, delegation, scope, and audit contracts.

Discovered
recipes_agent_memory_boundary_pack

Return agent memory classes, workflow profiles, TTLs, and persistence decisions.

Discovered
recipes_agent_skill_supply_chain_pack

Return agent skill provenance, permission, isolation, and supply-chain decisions.

Discovered
recipes_agent_trust_fabric_pack

Return Agent Trust Fabric dimensions, workflow tiers, source evidence, and buyer proof.

Discovered
recipes_agentic_action_runtime_pack

Return action classes, workflow action envelopes, runtime policy, and evidence.

Discovered
recipes_agentic_aivss_risk_scoring_pack

Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges.

Discovered
recipes_agentic_app_intake_pack

Return generated agentic app launch-review profiles and decisions.

Discovered
recipes_agentic_approval_receipt_pack

Return scope-bound approval receipt profiles, workflow requirements, and evidence.

Discovered
recipes_agentic_assurance_pack

Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed.

Discovered
recipes_agentic_catastrophic_risk_annex

Return the severe-risk annex for high-impact agentic AI runtime decisions.

Discovered
recipes_agentic_control_plane_blueprint

Return the acquisition-ready agentic control plane architecture and buyer evidence map.

Discovered
recipes_agentic_entitlement_review_pack

Return expiring agent entitlement leases, access reviews, and scope evidence.

Discovered
recipes_agentic_exposure_graph

Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence.

Discovered
recipes_agentic_incident_response_pack

Return agentic incident response classes, phases, workflow matrix, and evidence.

Discovered
recipes_agentic_measurement_probe_pack

Return measurement probes for agentic workflow traceability and readiness.

Discovered
recipes_agentic_posture_snapshot

Return the generated enterprise posture snapshot for agentic AI and MCP operations.

Discovered
recipes_agentic_protocol_conformance_pack

Return MCP/A2A protocol conformance evidence and buyer-ready drift controls.

Discovered
recipes_agentic_readiness_scorecard

Return generated scale, pilot, gate, or block decisions for agentic workflows.

Discovered
recipes_agentic_red_team_drill_pack

Return adversarial drills for agentic remediation workflows and MCP controls.

Discovered
recipes_agentic_red_team_replay_harness

Return replay fixtures, expected decisions, and evidence gates for red-team drills.

Discovered
recipes_agentic_run_receipt_pack

Return agent run receipt templates for identity, context, tools, egress, approval, and evidence.

Discovered
recipes_agentic_soc_detection_pack

Return SIEM-ready detections for agentic AI and MCP telemetry.

Discovered
recipes_agentic_source_freshness_watch

Return source-freshness and standards-drift evidence for SecurityRecipes.

Discovered
recipes_agentic_standards_crosswalk

Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance.

Discovered
recipes_agentic_system_bom

Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence.

Discovered
recipes_agentic_telemetry_contract

Return the OpenTelemetry-aligned agentic telemetry and redaction contract.

Discovered
recipes_agentic_threat_radar

Return current source-backed agentic AI threat signals and product priorities.

Discovered
recipes_browser_agent_boundary_pack

Return browser-agent workspace classes, task profiles, controls, and evidence.

Discovered
recipes_context_egress_boundary_pack

Return context egress data classes, destination classes, and workflow boundary policy.

Discovered
recipes_context_poisoning_guard_pack

Return context-poisoning scan results for registered secure-context sources.

Discovered
recipes_critical_infrastructure_secure_context_pack

Return the generated critical-infrastructure secure-context profile.

Discovered
recipes_cve_catalog_info

Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts.

Discovered
recipes_cve_get

Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE.

Discovered
recipes_cve_search

Search every in-scope Medium/High/Critical CVE; use recipes_cve_get for complete details.

Discovered
recipes_design_partner_pilot_pack

Return the design partner pilot motion for buyer proof and hosted MCP validation.

Discovered
recipes_enterprise_trust_center_export

Return the bundled enterprise trust-center export for buyer and platform diligence.

Discovered
recipes_get

Get a full recipe record by slug or path.

Discovered
recipes_hosted_mcp_readiness_pack

Return the hosted MCP readiness plan for enterprise product rollout.

Discovered
recipes_list

List recipes with optional metadata filtering.

Discovered
recipes_match_finding

Heuristic matcher that suggests best-fit recipes for a security finding.

Discovered
recipes_mcp_authorization_conformance_pack

Return MCP authorization conformance, scope-drift, and token-boundary evidence.

Discovered
recipes_mcp_connector_intake_pack

Return MCP connector intake decisions, risk findings, gaps, and promotion plans.

Discovered
recipes_mcp_connector_trust_pack

Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage.

Discovered
recipes_mcp_elicitation_boundary_pack

Return MCP form-mode and URL-mode elicitation boundary evidence.

Discovered
recipes_mcp_gateway_policy

Return generated MCP gateway policy for scoped tool access and runtime controls.

Discovered
recipes_mcp_risk_coverage_pack

Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence.

Discovered
recipes_mcp_server_get

Return one publicly documented MCP server with official setup and safety guidance.

Discovered
recipes_mcp_servers_list

Search the bundled catalog of publicly documented MCP servers and ecosystems.

Discovered
recipes_mcp_stdio_launch_boundary_pack

Return MCP STDIO launch boundaries, profiles, decisions, and evidence.

Discovered
recipes_mcp_tool_risk_contract

Return MCP tool annotation, trust, and session-combination risk evidence.

Discovered
recipes_mcp_tool_surface_drift_pack

Return pinned MCP tool descriptions, schemas, annotations, and drift evidence.

Discovered
recipes_mcp_upstream_call

Call an allowed read-only tool on a configured upstream MCP server.

Discovered
recipes_mcp_upstream_context

Collect bounded context from configured upstream MCP servers for a remediation query.

Discovered
recipes_mcp_upstream_servers

List optional upstream MCP servers configured for this Security Recipes server.

Discovered
recipes_mcp_upstream_tools

List tools exposed by a configured upstream MCP server and show local allow decisions.

Discovered
recipes_model_provider_routing_pack

Return model-provider route profiles, workflow mappings, and required evidence.

Discovered
recipes_playbook_get

Get one complete remediation workflow, evidence, output, and Python contract.

Discovered
recipes_playbook_plan

Build a deterministic, read-only phase, gate, and evidence checklist for a finding.

Discovered
recipes_playbooks_list

List concise remediation playbook records, optionally filtered by query or category.

Discovered
recipes_quality_report

Summarize recipe quality tiers and list recipes missing world-class signals.

Discovered
recipes_refresh

Refresh the in-memory copy of recipes-index.json.

Discovered
recipes_search

Full-text search over security-recipes documents.

Discovered
recipes_secure_context_attestation_pack

Return secure-context attestation subjects, verification policy, and recertification state.

Discovered
recipes_secure_context_buyer_diligence_brief

Return buyer and acquirer diligence evidence for the secure context layer.

Discovered
recipes_secure_context_customer_proof_pack

Return the customer proof contract for design partner and acquisition evidence.

Discovered
recipes_secure_context_eval_pack

Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs.

Discovered
recipes_secure_context_evidence_contract

Return the secure context evidence API and release contract.

Discovered
recipes_secure_context_lineage_ledger

Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes.

Discovered
recipes_secure_context_trust_pack

Return context provenance, retrieval policy, source hashes, and workflow context packages.

Discovered
recipes_secure_context_value_model

Return the secure context value model for buyer, ROI, and acquisition diligence.

Discovered
recipes_server_info

Return MCP server metadata and source-index configuration.

Discovered
recipes_workflow_control_plane

Return workflow control-plane policy for agents, reviewers, and MCP gateways.

Discovered

Recent measurements

Probe history

View status
Latest stored probes. Raw probe rows are kept for 14 days.
CheckedResultResponseTools
Connected895 ms75
Connected1745 ms75