Should my agent depend on the MCP server io.github.aristiun/aribot?

Verdict: allow — stale-mid-shared — safe to depend on As of 2026-08-15T11:28:18Z: a dated observation with receipts, not a warranty.

aribot

io.github.aristiun/aribot

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

— the operator's own registry description reported

Publisher io.github.aristiun · first seen 2026-08-12 · endpoint https://mcp.aribot.ayurak.com/mcp

allow

verdict

stale-mid-shared

cluster

ok_tools

answers

tools served

Dependency rating derived

allow — stale-mid-shared — safe to depend on

Cluster stale-mid-shared · distinctiveness 0.142 (typical). Every figure is a percentile or class within the 11,094-server census — see the whole spectrum.

Reach — can an agent get to it?

answersalive_tools

latency230 ms

vs populationtypical

protocolstale

authopen

Use — can it use it?

tools16

vs populationmid

capabilities1

harnessA

Trust — can it rely on it?

identityshared

servers on its host2

verifiabilityunassessed

duplicate inventoryyes

drift events0

answers true0/0 agree

🔏 Signed receipt rr_820c616e21ce9ba767c54c95 · ed25519 · key rs-rcpt-2026-08 — this rating is tamper-evident; an agent gets the full signature from check_server and can verify it against the published key.

Tools last seen

apply_remediation code_review_scan compliance_scan compliance_status discover_shadow_ai generate_threat_model get_api_security get_billing get_cloud_compliance get_diagram_summary get_framework_coverage get_insights get_remediation get_traceability onboard_agents verify_threats_in_code

Harness readiness observed

Can an agent's harness pick this tool and call it correctly? Graded on the three things an agent reads — name, description, typed parameters. Band A — an agent can pick and call these reliably.

legibility check	tools passing	ok
name is clear & specific	16/16	✓
has a description	16/16	✓
description is substantive	16/16	✓
parameters are typed	16/16	✓
parameters are described	15/16	15/16

16 of 16 tools graded · 16 with a captured input schema. RS-008, Tier-1 — no domain knowledge, applies to any tool. “Alive” is not the same as “usable”.

Truth checks observed

0/0 answers agree with the published primary source · 2 unverifiable.

claim class	key	verdict	primary source
OFAC SDN screening (vs the official list)	ISLAMIC REVOLUTIONARY GUARD CORPS	unverifiable	ofac-sdn
OFAC SDN screening (vs the official list)	MAERSK LINE	unverifiable	ofac-sdn

Protocol conformance observed

2024-11-05

protocol version

—

session model

1.0.0

server version aribot-mcp

Capabilities: tools

Drift

No confirmed drift on record. Baseline set 2026-08-14; changes appear here after human review.

History observed

Every probe we made, oldest → newest (2 shown, 2026-08-12 → 2026-08-14). Green answered · amber answered-but-walled · red no useful answer. A gap in our cadence is a gap in coverage, not evidence about the server.

changelog (1 events)

date	type	what changed
2026-08-12	outcome	first probe: ok_tools

raw probe records

probed (UTC)	outcome	http	ms	protocol
2026-08-14T19:59:23Z	ok_tools	200	230	2024-11-05
2026-08-12T05:34:35Z	ok_tools	200	246	2024-11-05

Watch or embed this verdict

Operators: put the live verdict in your README — it updates with every census, links back here, and is a dated observation, never a warranty:

[![Robin Saige verdict](https://robinsaige.com/badge/io.github.aristiun/aribot.svg)](https://robinsaige.com/s/io.github.aristiun/aribot)

Depend on it? Subscribe to its change feed — outcome changes and confirmed drift, no account needed. Building on it? The full dossier as JSON — verdict, rating, truth checks, history — stable enough to gate CI on.

← overview