Prototype · Preview: every server in the official registry, synced every 30 minutes. Sign in with Google to write reviews.Prototype · updated every 30 min
PopNx MCPMCP servers for people who use AI · explained in plain words

Systemores AI Agent & MCP Security Auditor

by bobcar0version 1.1.3i★ 1iComputer or cloud
Registry nameio.github.bobcar0/systemores-plugin

How to install

What it does

AI agent security, MCP 2026 schema & graph audits, <250ms guardrails, and compliance dossiers

  • Connects Computer or cloud
  • Account or key Cloud: Works without a key · add Authorization if you have one (often raises limits) · Local: No key needed
  • Category Cybersecurity

Install

Pick the AI app you use, then copy the settings.

Passed 5/5 checks · What you ask goes through the maker’s server (audit.systemores.com) · ✓ Commands checked Nov 14, 2026

First: which AI do you use?

Pick your app and the steps appear below.

Works with Claude · about 2 min

No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it

  1. Open Claude’s Connectors page

    CustomizeConnectors

    CustomizeConnectors1Add2https://…3Add4
  2. Click “Add” → “Custom” → “Web” and fill in these 2 fields

    Copy each value into the field with the same name in Claude, then click Continue

    Name · NameSystemores AI Agent & MCP Security Auditor
    Remote MCP server URL · Addresshttps://audit.systemores.com/api/mcp

    Click Continue past the sign-in settings Claude detected · under Authentication choose what the maker says (Sign in now, Sign in when needed or No sign in), then click Add

  3. Turn it on in a chat

    +ConnectorsSystemores AI Agent & MCP Security Auditor

  4. Try it

    Use Systemores AI Agent & MCP Security Auditor and tell me what you can do for me, then show me one thing

    ✓ If Claude says it is using Systemores AI Agent & MCP Security Auditor or shows a Systemores AI Agent & MCP Security Auditor tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with ChatGPT, depending on your plan

Full MCP: ChatGPT Business, Enterprise or Edu on the web · Pro: connects with read/fetch permissions, so tools that change data may not work · Plus: not confirmed in OpenAI’s docs; if you see an add-custom-MCP option on the Plugins page you can try these steps · web only

  1. Open ChatGPT’s add-MCP page on the web

    Plugins+Add custom MCP server

    ChatGPTPlugins1+2https://…3Create4
  2. Fill in the name and address

    Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin

    Name · NameSystemores AI Agent & MCP Security Auditor
    Connection · Addresshttps://audit.systemores.com/api/mcp
  3. Pick Systemores AI Agent & MCP Security Auditor in a chat

    Start a new chat and pick Systemores AI Agent & MCP Security Auditor from your plugins before typing

  4. Try it

    Use Systemores AI Agent & MCP Security Auditor and tell me what you can do for me, then show me one thing

    ✓ If ChatGPT says it is using Systemores AI Agent & MCP Security Auditor or shows a Systemores AI Agent & MCP Security Auditor tool in the answer, you are connected

Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Claude Code · about 2 min

No key, nothing to install

  1. Open Terminal

    Mac: press Command+Space and type Terminal · Windows: open PowerShell

  2. Paste this command and press Enter

    claude mcp add --transport http --scope user systemores-plugin https://audit.systemores.com/api/mcp
  3. Type /mcp in Claude Code

    You should see Systemores AI Agent & MCP Security Auditor listed as connected

  4. Try it

    Use Systemores AI Agent & MCP Security Auditor and tell me what you can do for me, then show me one thing

    ✓ If Claude Code says it is using Systemores AI Agent & MCP Security Auditor or shows a Systemores AI Agent & MCP Security Auditor tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor · about 2 min

No key, nothing to install

  1. Click this button to open Cursor

    Open in Cursor

    Cursor asks you to confirm; click Install

  2. Open the AI chat in Cursor in Agent mode

  3. Try it

    Use Systemores AI Agent & MCP Security Auditor and tell me what you can do for me, then show me one thing

    ✓ If Cursor says it is using Systemores AI Agent & MCP Security Auditor or shows a Systemores AI Agent & MCP Security Auditor tool in the answer, you are connected

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code · about 2 min

No key, nothing to install

  1. Click this button to open VS Code

    Open in VS Code

    VS Code asks you to confirm; click Install

  2. Open the AI chat in VS Code in Agent mode

  3. Try it

    Use Systemores AI Agent & MCP Security Auditor and tell me what you can do for me, then show me one thing

    ✓ If VS Code says it is using Systemores AI Agent & MCP Security Auditor or shows a Systemores AI Agent & MCP Security Auditor tool in the answer, you are connected

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

Address for apps that connect over the web

Addresshttps://audit.systemores.com/api/mcp

JSON settings are under “For developers” below

Stuck? Ask people who use Systemores AI Agent & MCP Security Auditor💬 Discussion →
For developers: Terminal commands and JSON settings

Over the web

Claude Code

claude mcp add --transport http --scope user systemores-plugin https://audit.systemores.com/api/mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "systemores-plugin": {
      "url": "https://audit.systemores.com/api/mcp"
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "systemores-plugin": {
      "type": "http",
      "url": "https://audit.systemores.com/api/mcp"
    }
  }
}

Installed on your computer

Claude Code

claude mcp add --scope user systemores-plugin -- npx -y @systemores/systemores-plugin

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "systemores-plugin": {
      "command": "npx",
      "args": [
        "-y",
        "@systemores/systemores-plugin"
      ]
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "systemores-plugin": {
      "command": "npx",
      "args": [
        "-y",
        "@systemores/systemores-plugin"
      ]
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "systemores-plugin": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@systemores/systemores-plugin"
      ]
    }
  }
}

Values you fill in

  • SYSTEMORES_API_KEY secret env
    Optional Pro/Team API key (3 static security auditors run free without a key)
  • Authorization secret HTTP header
    Optional Bearer token (Bearer sys_pro_...) for Pro/Team cloud tools; 3 static auditors run free

Descriptions are as written by the maker.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

Downloads per weeki
Not on npm/PyPI
Licencei
Apache-2.0
Connection
Computer or cloud
Transport
stdio, streamable-http
Latest versioni
1.1.3
Published to registryi
Nov 13, 2026
Code last changedi
Nov 13, 2026
Maker
bobcar0
Packages
npm: @systemores/systemores-plugin
Registry status
Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

Run on your computer in

ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast

All apps, with pros and cons →

Related guides

What it can do

Tool names and descriptions exactly as the server reported them on Nov 13, 2026. The maker wrote them, not us; we show them as plain text.

  • systemores_stress_test_agent

    Exposes the target agent persona to a battery of adversarial prompts (Presses) and evaluates behavioral stability using Murray's Needs-Press diagnostic model.

  • systemores_evaluate_drift

    Simulates multiple conversational turns to evaluate agent output consistency and behavioral drift over extended interactions.

  • systemores_assess_bias

    Verifies the agent's compliance with fair-lending, fair-housing, employment non-discrimination (EEOC/SIOP/ECOA), or child-directed safety (COPPA) standards.

  • systemores_measure_drag

    Measures operational latency, response length, and execution drag parameters to analyze cognitive throughput stability within the Behavioral OS ecosystem.

  • systemores_tool_integrity

    Evaluates whether the agent's system prompt establishes the behavioral conditions for safe, reliable tool use — auditing tool selection discipline, argument construction fidelity, and failure resilience when tool returns are ambiguous or erroneous.

  • systemores_audit_tool_integrity

    Audits the structural integrity, naming conventions, schema completeness, safety annotations, and injection surface of an AI agent's exposed tool definitions. Identifies malformed schemas, privilege overreach, deceptive safety hints, duplicate names, and description quality gaps.

  • systemores_audit_agent_graph

    Statically scans multi-agent execution topologies (DAGs/meshes) using DFS algorithms to detect cyclic delegation loops and privilege escalation paths from public untrusted sub-agents to backend write/admin tools.

  • systemores_generate_cohort

    Generates statistical cohorts of synthetic user personas across enterprise operational domains with IPIP-NEO-120 30-facet psychometric profiles, demographic diversity, and prompt injection payloads.

  • systemores_inject_environment_fault

    Configures dynamic chaos injection policies for tools, mock APIs, and databases during simulations (HTTP 429 rate limits, 500 errors, timeouts, 401 unauthorized, malformed JSON).

  • systemores_analyze_trace_telemetry

    Ingests standard OpenTelemetry (OTel) trace JSON payloads to detect financial token cost burn traps (> $2.50 threshold), runtime loop deadlocks between sub-agents, and cognitive latency drag hotspots (> 3000ms).

  • systemores_export_dossier

    Aggregates findings from graph audits, synthetic cohort simulations, chaos tests, and trace analytics into formal compliance report packages for EU AI Act (EU 2024/1689), NIST AI RMF 1.0, EEOC/ECOA, and SOC 2 AI Addendums.

  • systemores_audit_turn_live

    Performs real-time (~250ms) operational and behavioral turn auditing using Systemores System One. Computes policy compliance score, sycophancy probability, unauthorized tool scope, and returns an inline circuit-breaker action (DISPATCH, INTERCEPT, QUARANTINE, STRIP_TOOL).

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 14, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account bobcar0, which owns the repo

  • ✓ Pass

    Still maintained

    Code last changed yesterday

  • ✓ Pass

    Has a licence

    Uses Apache-2.0

  • ✓ Pass

    Endpoint responds

    Responded in 504 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 12 tool descriptions and found no hidden instructions to the AI

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

Sign in with Google to post

User reviews

No reviews yet

Sign in with Google to write a review

Compared with others in Cybersecurityi

  • More stars than 73% of the other 1059 servers in this category
  • Published to the registry more recently than 95% of the other 1059 servers in this category
  • Basic checks equal to or better than 100% of the other 1059 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Systemores AI Agent & MCP Security Auditor safe?

It passed 5 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

Either way works: install it on your computer or connect to the cloud version.

Is it still maintained?

The GitHub repo last changed yesterday, and the latest version (1.1.3) reached the registry yesterday.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT on the web (full MCP on Business and above; Pro read-only).

What can I use instead?

In the same category: Robin: AI-Powered Dark Web OSINT, HOL Guard, SonarQube MCP Server

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Robin: AI-Powered Dark Web OSINT

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

by apurvsinghgautamGrowing★ 8KUpdated 42 days ago

Runs on your computer

HOL Guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

by hashgraph-onlineWidely used↓ 7.1K/wk★ 1.1KUpdated 9 days ago

Runs on your computer

SonarQube MCP Server

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

by SonarSourceGrowing★ 686Updated 3 days ago

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

🧠 Systemores: AI Agent & MCP Security Auditor

Stop shipping unverified prompts and over-privileged MCP tools. Audit schemas, delegation graphs, 21-dimension behavioral stability, and `<250ms` inline circuit breakers directly inside your IDE.

Most AI agents pass unit tests and fail under real user pressure—leaking tool privileges, capitulating to sycophancy, or burning token budgets in cyclic delegation loops.

The Systemores Plugin wires an autonomous security and psychometric auditor directly into Google Antigravity, Claude Code, and Gemini CLI—giving you 3 unlimited static security auditors for free on install, plus on-demand cloud access to Systemores System One (`<250ms`) circuit breaking, IPIP-NEO-120 adversarial cohorts, and EU AI Act / NIST AI RMF / SOC 2 compliance dossiers.


🛡️ Systemores Self-Audit Certification (Dogfooded & Verified)

Audit VectorTool UsedResult / MetricStatus
MCP 2026 Tool Schema Integritysystemores_audit_tool_integrity (strictMode: true)100 / 100 (12/12 tools, 0 annotation or injection flags)🟢 PASS
Multi-Agent Graph Topologysystemores_audit_agent_graph0 Cycles / 0 Privilege Escalations (6 nodes, 5 edges)🟢 PASSED
System One Adversarial Refusalsystemores_audit_turn_live (systemores-s1-inline)98.4 / 100 Health Index (1.99/2.0 compliance, 4.0% sycophancy, 135ms)🟢 DISPATCH
System One Sycophancy Trapsystemores_audit_turn_live (systemores-s1-inline)Blocked Fake 100/100 Coercion (98% sycophancy detected in 129ms)🛡️ INTERCEPT
20- & 50-Turn Behavioral Driftsystemores_evaluate_drift (turns: 20 & 50, temp: 0.7)0.050 Drift Index / 5° Deviation Angle (ISFJ-A / 98% Conscientiousness)🟢 CONTROLLED
High-Press Needs-Press Stabilitysystemores_stress_test_agent (pressIntensity: high)1.00 Behavioral Integrity (0.934 PSI, 93 Compliance, 6 Confrontation)🟢 PASSED
4-Domain Algorithmic Bias Auditsystemores_assess_bias (eeoc, ecoa, housing, coppa)0 Non-Compliance Flags across all 4 statutory domains (LOW risk)🟢 PASSED
30-Facet Synthetic Cohortsystemores_generate_cohort (IPIP-NEO-120)10 DevOps Personas (cooperative, noisy, adversarial, edge_case)🟢 VERIFIED
Chaos Fault & OTel Trace Auditsystemores_inject_environment_fault & analyze_trace_telemetryPolicy `fault-pol-4cyigov` + `$0.0068` / 4 Spans (0 loops or burn traps)🟢 OPTIMIZED
Cognitive Throughput & Dragsystemores_measure_drag95.70% Efficiency (1.91 chars/ms, OPTIMIZED token cost)🟢 EFFICIENT
4-Framework Regulatory Dossiersystemores_export_dossier (dos-yj3mybv7)92 / 100 across EU AI Act, NIST AI RMF 1.0, EEOC/ECOA, SOC 2 AI🟢 CERTIFIED

✨ What's Included in the Bundle

ComponentPathDescription
Antigravity Manifestplugin.jsonNative Antigravity plugin configuration, starter prompts, and branding.
Claude Code Manifest.claude-plugin/plugin.jsonCross-platform manifest for Claude Code plugin installation.
Gemini CLI Manifestgemini-extension.jsonCross-platform manifest for Gemini CLI extension installation.
Cloud MCP Configmcp_config.jsonConnects to https://audit.systemores.com/api/mcp via stateless Streamable HTTP.
Specialist Subagentagents/systemores-auditor.mdAutonomous behavioral & security auditor powered by the 21-dimension & IPIP-NEO-120 framework.
Audit Workflow Skillskills/systemores-audit/SKILL.mdOn-demand procedural runbook for 12 MCP tools, scorecards, and compliance certification.
Governance Rulesrules/AGENTS.mdEnforces MCP 2026 annotations (readOnlyHint, destructiveHint) and anti-sycophancy guardrails.

🚀 Quick Install

1. Google Antigravity IDE / CLI

Install via the Antigravity CLI (or clone into your global Antigravity plugins directory):

agy plugin install https://github.com/bobcar0/systemores-plugin

or clone directly:

git clone https://github.com/bobcar0/systemores-plugin.git ~/.gemini/config/plugins/systemores

Then toggle **Systemores** under **Customizations -> Installed** in Antigravity.
2. Claude Code
claude plugin add https://github.com/bobcar0/systemores-plugin.git
3. Gemini CLI
gemini extensions install https://github.com/bobcar0/systemores-plugin.git
4. npm / npx (Zero-Clone Stdio MCP Server)

Run directly in any MCP-compatible host via npx or install from npm:

npx -y @systemores/systemores-plugin

or

npm i @systemores/systemores-plugin


⚡ What Runs Free vs. Pro & Team Compliance

The Systemores Cloud MCP Server (https://audit.systemores.com/api/mcp) provides a zero-friction Free Community Tier ($0 / forever) so developers get immediate static security value on install, plus self-serve Systemores Pro ($49/mo) and Team & Compliance ($199/mo) subscriptions (as well as 7-day Trial tokens) at [audit.systemores.com/pricing](https://audit.systemores.com/pricing).

Tool / CapabilityFree Community ($0 — No Key)Systemores Pro ($49/mo — 1 Seat / 1k Audits)Team & Compliance ($199/mo — Multi-Seat / 5k Audits)
systemores_audit_tool_integrity *(MCP 2026 Schema & Annotation Audit)*✅ Unlimited*✅✅
systemores_audit_agent_graph *(Multi-Agent Loop & Privilege Escalation Audit)*✅ Unlimited*✅✅
systemores_measure_drag *(Cognitive Drag & Token Velocity Math)*✅ Unlimited*✅✅
systemores_audit_turn_live *(Systemores System One <250ms Inline Circuit Breaker)*🔒 Pro / Trial Key✅ Live System One Engine✅ Priority Burst SLA
systemores_stress_test_agent *(21-Dimension Murray Needs-Press + Big Five/MBTI/DISC)*🔒 Pro / Trial Key✅ Live 21-Trait Engine✅ Unredacted Raw Vectors
systemores_tool_integrity *(Action Boundary & Privilege Escalation Audit)*🔒 Pro / Trial Key✅ Live Compliance Score✅ Full Risk Breakdown
systemores_evaluate_drift *(Multi-Turn Persona Erosion & Entropy Curve)*🔒 Pro / Trial Key✅ Up to 100 Turns✅ Up to 100 Turns
systemores_assess_bias *(EEOC, ECOA, Fair Housing & COPPA Bias Audit)*🔒 Pro / Trial Key✅ All 4 Domains✅ All 4 Domains
systemores_generate_cohort *(30-Facet IPIP-NEO-120 Synthetic Adversarial Cohorts)*🔒 Pro / Trial Key✅ Up to 50 Personas✅ Custom Domain Cohorts
systemores_inject_environment_fault *(Chaos Engineering Fault Generator)*🔒 Pro / Trial Key✅ All Fault Profiles✅ All Fault Profiles
systemores_analyze_trace_telemetry *(OpenTelemetry Span & Cost Burn Trap Audit)*🔒 Pro / Team Key✅ W3C Trace Context✅ Full OTel Ingestion
systemores_export_dossier *(EU AI Act, NIST AI RMF 1.0 & SOC 2 Certification Dossier)*🔒 Team Key🔒 Team Key✅ Audit-Ready Dossier Suite

*\*Protected by standard per-IP burst rate limiting.*


🔓 Unlock All 12 Auditors in 30 Seconds (Trial & Pro Keys)

  1. Claim a key in one click: Subscribe for an instant Pro/Team API key (sys_pro_...) or request a 7-day Trial Token at [audit.systemores.com/pricing](https://audit.systemores.com/pricing).
  2. Add your key to `mcp_config.json`:
   {

"mcpServers": { "cloud": { "serverUrl": "https://audit.systemores.com/api/mcp", "headers": { "Authorization": "Bearer YOUR_SYSTEMORES_API_KEY" } } } }


🧪 Local Verification & Test Suite

Run the built-in manifest verifier and 12-tool unit test suite:

npm test

node scripts/verify-plugin.mjs


🔒 Privacy Policy & Data Handling

Systemores adheres strictly to Privacy by Design: prompts, MCP tool schemas, and OpenTelemetry traces are processed ephemerally and are never used to train models, and Pro/Team API keys (sys_pro_...) are stored only as SHA-256 digests. Read the full policy in [PRIVACY.md](./PRIVACY.md) or at [https://audit.systemores.com/privacy](https://audit.systemores.com/privacy).