Security Recipes

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs in the cloud
• Transport: Streamable HTTP
• Category: Cybersecurity

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

https://security-recipes.ai/mcp

claude mcp add --transport http security-recipes https://security-recipes.ai/mcp

{
  "mcpServers": {
    "security-recipes": {
      "url": "https://security-recipes.ai/mcp"
    }
  }
}

{
  "servers": {
    "security-recipes": {
      "type": "http",
      "url": "https://security-recipes.ai/mcp"
    }
  }
}

https://security-recipes.ai/mcp

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 10, 2026. The maker wrote them, not us; we show them as plain text.

• recipes_server_info

  Return MCP server metadata and source-index configuration.

• recipes_mcp_upstream_servers

  List optional upstream MCP servers configured for this Security Recipes server.

• recipes_mcp_servers_list

  Search the bundled catalog of publicly documented MCP servers and ecosystems.

• recipes_mcp_server_get

  Return one publicly documented MCP server with official setup and safety guidance.

• recipes_mcp_upstream_tools

  List tools exposed by a configured upstream MCP server and show local allow decisions.

• recipes_mcp_upstream_call

  Call an allowed read-only tool on a configured upstream MCP server.

• recipes_mcp_upstream_context

  Collect bounded context from configured upstream MCP servers for a remediation query.

• recipes_refresh

  Refresh the in-memory copy of recipes-index.json.

• recipes_search

  Full-text search over security-recipes documents.

• recipes_list

  List recipes with optional metadata filtering.

• recipes_get

  Get a full recipe record by slug or path.

• recipes_playbooks_list

  List concise remediation playbook records, optionally filtered by query or category.

• recipes_playbook_get

  Get one complete remediation workflow, evidence, output, and Python contract.

• recipes_playbook_plan

  Build a deterministic, read-only phase, gate, and evidence checklist for a finding.

• recipes_cve_catalog_info

  Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts.

• recipes_cve_search

  Search every in-scope Medium/High/Critical CVE; use recipes_cve_get for complete details.

• recipes_cve_get

  Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE.

• recipes_quality_report

  Summarize recipe quality tiers and list recipes missing world-class signals.

• recipes_workflow_control_plane

  Return workflow control-plane policy for agents, reviewers, and MCP gateways.

• recipes_mcp_gateway_policy

  Return generated MCP gateway policy for scoped tool access and runtime controls.

• recipes_agentic_assurance_pack

  Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed.

• recipes_agent_identity_ledger

  Return agent non-human identity, delegation, scope, and audit contracts.

• recipes_agentic_entitlement_review_pack

  Return expiring agent entitlement leases, access reviews, and scope evidence.

• recipes_agentic_approval_receipt_pack

  Return scope-bound approval receipt profiles, workflow requirements, and evidence.

• recipes_mcp_connector_trust_pack

  Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage.

• recipes_mcp_connector_intake_pack

  Return MCP connector intake decisions, risk findings, gaps, and promotion plans.

• recipes_mcp_stdio_launch_boundary_pack

  Return MCP STDIO launch boundaries, profiles, decisions, and evidence.

• recipes_mcp_authorization_conformance_pack

  Return MCP authorization conformance, scope-drift, and token-boundary evidence.

• recipes_mcp_elicitation_boundary_pack

  Return MCP form-mode and URL-mode elicitation boundary evidence.

• recipes_mcp_tool_risk_contract

  Return MCP tool annotation, trust, and session-combination risk evidence.

• recipes_mcp_tool_surface_drift_pack

  Return pinned MCP tool descriptions, schemas, annotations, and drift evidence.

• recipes_agentic_red_team_drill_pack

  Return adversarial drills for agentic remediation workflows and MCP controls.

• recipes_agentic_red_team_replay_harness

  Return replay fixtures, expected decisions, and evidence gates for red-team drills.

• recipes_agentic_readiness_scorecard

  Return generated scale, pilot, gate, or block decisions for agentic workflows.

• recipes_agent_capability_risk_register

  Return capability-based residual risk scores for agentic workflows.

• recipes_agent_memory_boundary_pack

  Return agent memory classes, workflow profiles, TTLs, and persistence decisions.

• recipes_agent_skill_supply_chain_pack

  Return agent skill provenance, permission, isolation, and supply-chain decisions.

• recipes_agent_handoff_boundary_pack

  Return agent handoff boundary profiles, protocol controls, and workflow maps.

• recipes_a2a_agent_card_trust_profile

  Return A2A Agent Card intake profiles, trust controls, and sample decisions.

• recipes_agentic_system_bom

  Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence.

• recipes_agentic_run_receipt_pack

  Return agent run receipt templates for identity, context, tools, egress, approval, and evidence.

• recipes_secure_context_trust_pack

  Return context provenance, retrieval policy, source hashes, and workflow context packages.

• recipes_secure_context_attestation_pack

  Return secure-context attestation subjects, verification policy, and recertification state.

• recipes_secure_context_lineage_ledger

  Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes.

• recipes_secure_context_eval_pack

  Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs.

• recipes_context_poisoning_guard_pack

  Return context-poisoning scan results for registered secure-context sources.

• recipes_context_egress_boundary_pack

  Return context egress data classes, destination classes, and workflow boundary policy.

• recipes_agentic_threat_radar

  Return current source-backed agentic AI threat signals and product priorities.

• recipes_agentic_standards_crosswalk

  Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance.

• recipes_agentic_source_freshness_watch

  Return source-freshness and standards-drift evidence for SecurityRecipes.

• recipes_mcp_risk_coverage_pack

  Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence.

• recipes_agentic_protocol_conformance_pack

  Return MCP/A2A protocol conformance evidence and buyer-ready drift controls.

• recipes_agentic_control_plane_blueprint

  Return the acquisition-ready agentic control plane architecture and buyer evidence map.

• recipes_agentic_exposure_graph

  Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence.

• recipes_agentic_posture_snapshot

  Return the generated enterprise posture snapshot for agentic AI and MCP operations.

• recipes_agentic_aivss_risk_scoring_pack

  Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges.

• recipes_agentic_app_intake_pack

  Return generated agentic app launch-review profiles and decisions.

• recipes_model_provider_routing_pack

  Return model-provider route profiles, workflow mappings, and required evidence.

• recipes_agentic_catastrophic_risk_annex

  Return the severe-risk annex for high-impact agentic AI runtime decisions.

• recipes_critical_infrastructure_secure_context_pack

  Return the generated critical-infrastructure secure-context profile.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 10, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified with the GitHub account stevologic, which owns the repo

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 783 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 60 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

• More stars than 0% of the other 1013 servers in this category
• Published to the registry more recently than 38% of the other 1013 servers in this category
• Basic checks equal to or better than 100% of the other 1013 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker