Security Recipes
Read-only CVE intelligence, remediation playbooks, and agent setup guides.
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only
What it can do
What data it sees
Do you need an account
No: the server works without sign-in
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
How to connect
How to connect Security Recipes to Claude
The server address to paste into Claude settings:
https://security-recipes.ai/mcp
- Open Claude (claude.ai or the desktop app).
- Go to Settings → Connectors.
- Click Add custom connector.
- Paste the server address copied below into Remote MCP server URL and click Add.
- In a chat, click + → Connectors and switch the new connector on.
Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.
Authorization
After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.
How to connect Security Recipes to ChatGPT
The server address to paste into ChatGPT settings:
https://security-recipes.ai/mcp
- Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
- Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
- Open Settings → Connectors and click Create.
- Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
- Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
- In a new chat open + → Apps/Connectors and enable the connector.
OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.
Authorization
On first use ChatGPT opens the service's sign-in window. Sign in and approve access.
How to connect Security Recipes to Cursor
The server address to paste into Cursor settings:
https://security-recipes.ai/mcp
Fastest: click Open in Cursor below and confirm the prompt.
Manually:
- In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
- Paste the JSON copied below into
~/.cursor/mcp.json(per project:.cursor/mcp.jsonin the repo root). - Save the file. The server appears in the MCP list; authorize it there if asked.
Authorization
If the service needs sign-in, an authorize button appears next to the server in the MCP list.
Server tool list (75)
Raw names from tools/list. Only developers need these.
| recipes_server_info | Return MCP server metadata and source-index configuration. |
| recipes_mcp_upstream_servers | List optional upstream MCP servers configured for this Security Recipes server. |
| recipes_mcp_servers_list | Search the bundled catalog of publicly documented MCP servers and ecosystems. |
| recipes_mcp_server_get | Return one publicly documented MCP server with official setup and safety guidance. |
| recipes_mcp_upstream_tools | List tools exposed by a configured upstream MCP server and show local allow decisions. |
| recipes_mcp_upstream_call | Call an allowed read-only tool on a configured upstream MCP server. |
| recipes_mcp_upstream_context | Collect bounded context from configured upstream MCP servers for a remediation query. |
| recipes_refresh | Refresh the in-memory copy of recipes-index.json. |
| recipes_search | Full-text search over security-recipes documents. |
| recipes_list | List recipes with optional metadata filtering. |
| recipes_get | Get a full recipe record by slug or path. |
| recipes_playbooks_list | List concise remediation playbook records, optionally filtered by query or category. |
| recipes_playbook_get | Get one complete remediation workflow, evidence, output, and Python contract. |
| recipes_playbook_plan | Build a deterministic, read-only phase, gate, and evidence checklist for a finding. |
| recipes_cve_catalog_info | Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts. |
| recipes_cve_search | Search every in-scope Medium/High/Critical CVE; use recipes_cve_get for complete details. |
| recipes_cve_get | Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE. |
| recipes_quality_report | Summarize recipe quality tiers and list recipes missing world-class signals. |
| recipes_workflow_control_plane | Return workflow control-plane policy for agents, reviewers, and MCP gateways. |
| recipes_mcp_gateway_policy | Return generated MCP gateway policy for scoped tool access and runtime controls. |
| recipes_agentic_assurance_pack | Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed. |
| recipes_agent_identity_ledger | Return agent non-human identity, delegation, scope, and audit contracts. |
| recipes_agentic_entitlement_review_pack | Return expiring agent entitlement leases, access reviews, and scope evidence. |
| recipes_agentic_approval_receipt_pack | Return scope-bound approval receipt profiles, workflow requirements, and evidence. |
| recipes_mcp_connector_trust_pack | Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage. |
| recipes_mcp_connector_intake_pack | Return MCP connector intake decisions, risk findings, gaps, and promotion plans. |
| recipes_mcp_stdio_launch_boundary_pack | Return MCP STDIO launch boundaries, profiles, decisions, and evidence. |
| recipes_mcp_authorization_conformance_pack | Return MCP authorization conformance, scope-drift, and token-boundary evidence. |
| recipes_mcp_elicitation_boundary_pack | Return MCP form-mode and URL-mode elicitation boundary evidence. |
| recipes_mcp_tool_risk_contract | Return MCP tool annotation, trust, and session-combination risk evidence. |
| recipes_mcp_tool_surface_drift_pack | Return pinned MCP tool descriptions, schemas, annotations, and drift evidence. |
| recipes_agentic_red_team_drill_pack | Return adversarial drills for agentic remediation workflows and MCP controls. |
| recipes_agentic_red_team_replay_harness | Return replay fixtures, expected decisions, and evidence gates for red-team drills. |
| recipes_agentic_readiness_scorecard | Return generated scale, pilot, gate, or block decisions for agentic workflows. |
| recipes_agent_capability_risk_register | Return capability-based residual risk scores for agentic workflows. |
| recipes_agent_memory_boundary_pack | Return agent memory classes, workflow profiles, TTLs, and persistence decisions. |
| recipes_agent_skill_supply_chain_pack | Return agent skill provenance, permission, isolation, and supply-chain decisions. |
| recipes_agent_handoff_boundary_pack | Return agent handoff boundary profiles, protocol controls, and workflow maps. |
| recipes_a2a_agent_card_trust_profile | Return A2A Agent Card intake profiles, trust controls, and sample decisions. |
| recipes_agentic_system_bom | Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence. |
| recipes_agentic_run_receipt_pack | Return agent run receipt templates for identity, context, tools, egress, approval, and evidence. |
| recipes_secure_context_trust_pack | Return context provenance, retrieval policy, source hashes, and workflow context packages. |
| recipes_secure_context_attestation_pack | Return secure-context attestation subjects, verification policy, and recertification state. |
| recipes_secure_context_lineage_ledger | Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes. |
| recipes_secure_context_eval_pack | Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs. |
| recipes_context_poisoning_guard_pack | Return context-poisoning scan results for registered secure-context sources. |
| recipes_context_egress_boundary_pack | Return context egress data classes, destination classes, and workflow boundary policy. |
| recipes_agentic_threat_radar | Return current source-backed agentic AI threat signals and product priorities. |
| recipes_agentic_standards_crosswalk | Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance. |
| recipes_agentic_source_freshness_watch | Return source-freshness and standards-drift evidence for SecurityRecipes. |
| recipes_mcp_risk_coverage_pack | Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence. |
| recipes_agentic_protocol_conformance_pack | Return MCP/A2A protocol conformance evidence and buyer-ready drift controls. |
| recipes_agentic_control_plane_blueprint | Return the acquisition-ready agentic control plane architecture and buyer evidence map. |
| recipes_agentic_exposure_graph | Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence. |
| recipes_agentic_posture_snapshot | Return the generated enterprise posture snapshot for agentic AI and MCP operations. |
| recipes_agentic_aivss_risk_scoring_pack | Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges. |
| recipes_agentic_app_intake_pack | Return generated agentic app launch-review profiles and decisions. |
| recipes_model_provider_routing_pack | Return model-provider route profiles, workflow mappings, and required evidence. |
| recipes_agentic_catastrophic_risk_annex | Return the severe-risk annex for high-impact agentic AI runtime decisions. |
| recipes_critical_infrastructure_secure_context_pack | Return the generated critical-infrastructure secure-context profile. |
| recipes_agentic_incident_response_pack | Return agentic incident response classes, phases, workflow matrix, and evidence. |
| recipes_agentic_action_runtime_pack | Return action classes, workflow action envelopes, runtime policy, and evidence. |
| recipes_agent_trust_fabric_pack | Return Agent Trust Fabric dimensions, workflow tiers, source evidence, and buyer proof. |
| recipes_browser_agent_boundary_pack | Return browser-agent workspace classes, task profiles, controls, and evidence. |
| recipes_agentic_measurement_probe_pack | Return measurement probes for agentic workflow traceability and readiness. |
| recipes_agentic_telemetry_contract | Return the OpenTelemetry-aligned agentic telemetry and redaction contract. |
| recipes_agentic_soc_detection_pack | Return SIEM-ready detections for agentic AI and MCP telemetry. |
| recipes_enterprise_trust_center_export | Return the bundled enterprise trust-center export for buyer and platform diligence. |
| recipes_secure_context_value_model | Return the secure context value model for buyer, ROI, and acquisition diligence. |
| recipes_design_partner_pilot_pack | Return the design partner pilot motion for buyer proof and hosted MCP validation. |
| recipes_secure_context_buyer_diligence_brief | Return buyer and acquirer diligence evidence for the secure context layer. |
| recipes_secure_context_customer_proof_pack | Return the customer proof contract for design partner and acquisition evidence. |
| recipes_secure_context_evidence_contract | Return the secure context evidence API and release contract. |
| recipes_hosted_mcp_readiness_pack | Return the hosted MCP readiness plan for enterprise product rollout. |
| recipes_match_finding | Heuristic matcher that suggests best-fit recipes for a security finding. |