Security Recipes

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

• 连接方式: 在云端运行
• 传输方式: Streamable HTTP
• 分类: 网络安全

安装

选择你使用的 AI 应用，然后复制设置。

你需要

• 在云端运行无需安装任何东西，通过互联网连接

你用的是哪个应用？

https://security-recipes.ai/mcp

claude mcp add --transport http security-recipes https://security-recipes.ai/mcp

{
  "mcpServers": {
    "security-recipes": {
      "url": "https://security-recipes.ai/mcp"
    }
  }
}

{
  "servers": {
    "security-recipes": {
      "type": "http",
      "url": "https://security-recipes.ai/mcp"
    }
  }
}

https://security-recipes.ai/mcp

你的选择通过 Cookie 保存在这台设备上，无需账户。

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

哪些应用可以使用它

依据这个服务器的连接方式和各应用自己的文档，检查于 2026年11月10日。

通过互联网连接，适用于

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

全部应用及其优缺点 →

它能做什么

工具名称和描述与服务器在 2026年11月10日 报告的完全一致。这些内容由作者撰写，不是我们写的；我们以纯文本形式显示。

• recipes_server_info

  Return MCP server metadata and source-index configuration.

• recipes_mcp_upstream_servers

  List optional upstream MCP servers configured for this Security Recipes server.

• recipes_mcp_servers_list

  Search the bundled catalog of publicly documented MCP servers and ecosystems.

• recipes_mcp_server_get

  Return one publicly documented MCP server with official setup and safety guidance.

• recipes_mcp_upstream_tools

  List tools exposed by a configured upstream MCP server and show local allow decisions.

• recipes_mcp_upstream_call

  Call an allowed read-only tool on a configured upstream MCP server.

• recipes_mcp_upstream_context

  Collect bounded context from configured upstream MCP servers for a remediation query.

• recipes_refresh

  Refresh the in-memory copy of recipes-index.json.

• recipes_search

  Full-text search over security-recipes documents.

• recipes_list

  List recipes with optional metadata filtering.

• recipes_get

  Get a full recipe record by slug or path.

• recipes_playbooks_list

  List concise remediation playbook records, optionally filtered by query or category.

• recipes_playbook_get

  Get one complete remediation workflow, evidence, output, and Python contract.

• recipes_playbook_plan

  Build a deterministic, read-only phase, gate, and evidence checklist for a finding.

• recipes_cve_catalog_info

  Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts.

• recipes_cve_search

  Search every in-scope Medium/High/Critical CVE; use recipes_cve_get for complete details.

• recipes_cve_get

  Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE.

• recipes_quality_report

  Summarize recipe quality tiers and list recipes missing world-class signals.

• recipes_workflow_control_plane

  Return workflow control-plane policy for agents, reviewers, and MCP gateways.

• recipes_mcp_gateway_policy

  Return generated MCP gateway policy for scoped tool access and runtime controls.

• recipes_agentic_assurance_pack

  Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed.

• recipes_agent_identity_ledger

  Return agent non-human identity, delegation, scope, and audit contracts.

• recipes_agentic_entitlement_review_pack

  Return expiring agent entitlement leases, access reviews, and scope evidence.

• recipes_agentic_approval_receipt_pack

  Return scope-bound approval receipt profiles, workflow requirements, and evidence.

• recipes_mcp_connector_trust_pack

  Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage.

• recipes_mcp_connector_intake_pack

  Return MCP connector intake decisions, risk findings, gaps, and promotion plans.

• recipes_mcp_stdio_launch_boundary_pack

  Return MCP STDIO launch boundaries, profiles, decisions, and evidence.

• recipes_mcp_authorization_conformance_pack

  Return MCP authorization conformance, scope-drift, and token-boundary evidence.

• recipes_mcp_elicitation_boundary_pack

  Return MCP form-mode and URL-mode elicitation boundary evidence.

• recipes_mcp_tool_risk_contract

  Return MCP tool annotation, trust, and session-combination risk evidence.

• recipes_mcp_tool_surface_drift_pack

  Return pinned MCP tool descriptions, schemas, annotations, and drift evidence.

• recipes_agentic_red_team_drill_pack

  Return adversarial drills for agentic remediation workflows and MCP controls.

• recipes_agentic_red_team_replay_harness

  Return replay fixtures, expected decisions, and evidence gates for red-team drills.

• recipes_agentic_readiness_scorecard

  Return generated scale, pilot, gate, or block decisions for agentic workflows.

• recipes_agent_capability_risk_register

  Return capability-based residual risk scores for agentic workflows.

• recipes_agent_memory_boundary_pack

  Return agent memory classes, workflow profiles, TTLs, and persistence decisions.

• recipes_agent_skill_supply_chain_pack

  Return agent skill provenance, permission, isolation, and supply-chain decisions.

• recipes_agent_handoff_boundary_pack

  Return agent handoff boundary profiles, protocol controls, and workflow maps.

• recipes_a2a_agent_card_trust_profile

  Return A2A Agent Card intake profiles, trust controls, and sample decisions.

• recipes_agentic_system_bom

  Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence.

• recipes_agentic_run_receipt_pack

  Return agent run receipt templates for identity, context, tools, egress, approval, and evidence.

• recipes_secure_context_trust_pack

  Return context provenance, retrieval policy, source hashes, and workflow context packages.

• recipes_secure_context_attestation_pack

  Return secure-context attestation subjects, verification policy, and recertification state.

• recipes_secure_context_lineage_ledger

  Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes.

• recipes_secure_context_eval_pack

  Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs.

• recipes_context_poisoning_guard_pack

  Return context-poisoning scan results for registered secure-context sources.

• recipes_context_egress_boundary_pack

  Return context egress data classes, destination classes, and workflow boundary policy.

• recipes_agentic_threat_radar

  Return current source-backed agentic AI threat signals and product priorities.

• recipes_agentic_standards_crosswalk

  Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance.

• recipes_agentic_source_freshness_watch

  Return source-freshness and standards-drift evidence for SecurityRecipes.

• recipes_mcp_risk_coverage_pack

  Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence.

• recipes_agentic_protocol_conformance_pack

  Return MCP/A2A protocol conformance evidence and buyer-ready drift controls.

• recipes_agentic_control_plane_blueprint

  Return the acquisition-ready agentic control plane architecture and buyer evidence map.

• recipes_agentic_exposure_graph

  Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence.

• recipes_agentic_posture_snapshot

  Return the generated enterprise posture snapshot for agentic AI and MCP operations.

• recipes_agentic_aivss_risk_scoring_pack

  Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges.

• recipes_agentic_app_intake_pack

  Return generated agentic app launch-review profiles and decisions.

• recipes_model_provider_routing_pack

  Return model-provider route profiles, workflow mappings, and required evidence.

• recipes_agentic_catastrophic_risk_annex

  Return the severe-risk annex for high-impact agentic AI runtime decisions.

• recipes_critical_infrastructure_secure_context_pack

  Return the generated critical-infrastructure secure-context profile.

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月10日

• ✓ 通过

  作者与仓库一致

  注册名称已通过 GitHub 账户 stevologic 验证，该账户拥有此仓库

• ✓ 通过

  仍在维护

  代码最后更新于昨天

• … 尚未检查

  有许可证

  我们还没有从 GitHub 读取这个仓库

• ✓ 通过

  端点有响应

  在 783 毫秒内响应（HTTP 200）

• – 不适用

  使用 OAuth 登录

  无需登录

• ✓ 通过

  工具描述中没有隐藏指令

  已读取 60 个工具描述，未发现针对 AI 的隐藏指令

与“网络安全”中的其他服务器比较i

• 星标数多于此分类中其他 1017 个服务器的 78%
• 发布到注册中心的时间比此分类中其他 1017 个服务器的 38% 更新
• 基础检查结果等于或优于此分类中其他 1017 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：↓ 每周下载量i★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

作者的 README