Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Advisory check: given a described action or command the agent is about to take, return the baseline security factlets that plausibly apply, so the agent can self-correct. Advisory only — does NOT block. Real-time blocking is Kernora Agent Security's paid Integrity Plane.
the action/command about to run
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Advisory check: given a described action or command the agent is about to take, return the baseline security factlets that plausibly apply, so the agent can self-correct. Advisory only — does NOT block. Real-time blocking is Kernora Agent Security's paid Integrity Plane.
| Argument | Type | Description |
|---|---|---|
| action* | string | the action/command about to run |
{
"type": "object",
"required": [
"action"
],
"properties": {
"action": {
"type": "string",
"description": "the action/command about to run"
}
}
}Return Kernora Agent Security's curated security baseline — the known-good rules an AI coding agent should follow (secrets, injection, supply-chain, destructive ops, data protection). Advisory grounding.
No arguments.
{
"type": "object",
"properties": {}
}