TOPY.AI · AI CSO

Name: TOPY.AI · AI CSO
Author: TOPY-AI-LTD

作者：TOPY-AI-LTD版本 0.1.0i★ –i电脑或云端

注册名称ai.topy/cso

安装

概览

作者提供的说明（英文原文）

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 电脑或云端
传输方式: stdio, Streamable HTTP
分类: 其他
你需要填写：TOPY_API_KEY

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在作者的服务器上运行：你向它提出的内容会经过他们的服务器。
需要你自己填写： TOPY_API_KEY

标为机密的值是你账户的钥匙。千万不要分享给别人，也不要粘贴到聊天里。

你需要

在云端运行无需安装任何东西，通过互联网连接
npm已安装 Node.js（用于 npx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

适用于网页版、桌面版和手机版 Claude：

打开 Settings → Connectors
点击 Add custom connector
粘贴下面的地址，然后点击 Add
如果要求登录，请登录作者的服务

https://topy.ai/mcp/cso

或者在你的电脑上运行

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "cso": {
      "command": "npx",
      "args": [
        "-y",
        "@topy-ai/cso-mcp"
      ],
      "env": {
        "TOPY_API_KEY": "your-value"
      }
    }
  }
}

在终端中运行这条命令

claude mcp add --transport http cso https://topy.ai/mcp/cso

或者在你的电脑上运行

claude mcp add cso --env TOPY_API_KEY=your-value -- npx -y @topy-ai/cso-mcp

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "cso": {
      "url": "https://topy.ai/mcp/cso"
    }
  }
}

或者在你的电脑上运行

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "cso": {
      "command": "npx",
      "args": [
        "-y",
        "@topy-ai/cso-mcp"
      ],
      "env": {
        "TOPY_API_KEY": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "cso": {
      "type": "http",
      "url": "https://topy.ai/mcp/cso"
    }
  }
}

或者在你的电脑上运行

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "cso": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@topy-ai/cso-mcp"
      ],
      "env": {
        "TOPY_API_KEY": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

ChatGPT 只能连接互联网上的服务器：

打开网页版 ChatGPT → Settings → Connectors (Apps)
点击 Create 或 Add（部分套餐需要先在 Advanced 中开启 Developer mode）
粘贴下面的地址，起个名字，然后保存
如果要求登录，请登录作者的服务

https://topy.ai/mcp/cso

菜单名称可能因套餐和版本不同而略有差异。

你的选择通过 Cookie 保存在这台设备上，无需账户。

需要你填写的值

TOPY_API_KEY 机密 env
A TOPY API key (Dashboard → API keys); or run `npx @topy-ai/cso-mcp login` once instead.

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

我们还没有读取这个服务器的工具列表；我们会轮流检查各个端点。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月6日

✓ 通过
作者与仓库一致
注册名称已通过域名 topy.ai 验证（注册中心会核实域名所有权）
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
… 尚未检查
端点有响应
尚未检查；我们会轮流检查各个端点
… 尚未检查
使用 OAuth 登录
尚未检查；我们会轮流检查各个端点
… 尚未检查
工具描述中没有隐藏指令
尚未检查；我们会在检查端点时读取工具列表

与“其他”中的其他服务器比较i

星标数多于此分类中其他 32505 个服务器的 0%
发布到注册中心的时间比此分类中其他 32505 个服务器的 77% 更新
基础检查结果等于或优于此分类中其他 32505 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

TOPY.AI · AI CSO 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

你需要填写：TOPY_API_KEY

它在我的电脑上运行还是在云端？

两种方式都可以：安装在你的电脑上，或者连接云端版本。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（0.1.0）于10天前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接，所以接受远程 MCP 服务器的应用也可以使用，例如开启开发者模式的 ChatGPT。

有什么可以替代它？

同一分类中有：Spec Driven Development, Remote Desktop Commander, topo^alpin

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Spec Driven Development

作者：formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

在你的电脑上运行★ 440MIT14个月前更新

安装

Remote Desktop Commander

作者：desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

在云端运行★ 211昨天更新

安装

topo^alpin

作者：topoalpin.app

Avalanche bulletins and mountain weather forecasts for any place in the Alps.

在云端运行今天更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

TOPY AI CSO Skills 19 skills that make your coding agent a small company's AI CSO: new CVEs and end-of-life dates for everything you run, no secrets in code, headers, TLS and safe scans of the domains you have verified, every skill and MCP server vetted before it is trusted, incident timelines and a weekly security report to the founder and the CEO — on the TOPY.AI CSO MCP server.

The AI CSO is goal-first. It keeps five standing goals — no open critical exposure (anything on CISA KEV or critical with a fix is fixed within days), zero secrets in code, verified-only active checks, nothing trusted unvetted (every new skill, MCP server and package checked first) and every incident with a timeline — and every skill below exists to move one of them.

Core (topy-ai-cso): connect, first setup (inventory, domain verification, host consent), the CSO's goals, the daily watch.
Vulnerabilities: are we affected by this CVE, dependencies and supply chain, end of life, vetting a package before install.
Code: secrets (rotate first, then remove), unsafe code patterns, a STRIDE threat model and the OWASP ASVS checklist.
Web: domain verification, headers and TLS, a safe scan of a verified site.
Agents: vet a skill or MCP server before it is installed (the App Factory gate), and audit your own MCP server.
Response: incident timelines, a fix plan with fix-risk tiers T1–T4, the weekly security report.

The safety model comes from Maggie Security and does not bend: the CSO never changes a server, firewall or website (fix and protection plans are for a person to review and apply), never scans a domain you have not verified, reads a server only after you grant consent yourself, by your own approval in the chat (an agent cannot), leaves checks of sites you don't control to a person (never a routine), never uses offensive techniques and never prints a secret. Changes take two calls — a preview, then your yes.

Install

npx @topy-ai/cso-skills install                  # this project, for the agents set up here

npx @topy-ai/cso-skills install -g --mcp # your user, plus the MCP server npx @topy-ai/cso-skills install --category vulnerabilities,web npx @topy-ai/cso-skills list

Claude Code plugins: /plugin marketplace add TOPY-AI-LTD/TOPY-AI-CSO-Skills, then /plugin install topy-ai-cso-all@topy-ai-cso. Codex: codex plugin marketplace add TOPY-AI-LTD/TOPY-AI-CSO-Skills. Pi: pi install npm:@topy-ai/cso-skills. See the installer README.

Connect TOPY.AI

https://topy.ai/mcp/cso — OAuth with your TOPY.AI account (the same one as the AI CEO, CFO and COO). Only the accounts that own the OneMan operation see its findings.

Client	How
Claude, ChatGPT (web, desktop)	custom connector `https://topy.ai/mcp/cso`
Claude Code	`claude mcp add --transport http topy-cso https://topy.ai/mcp/cso`
Codex	`codex mcp add topy-cso --url https://topy.ai/mcp/cso`
Clients that only start a command	`npx -y @topy-ai/cso-mcp` after `npx @topy-ai/cso-mcp login`
Terminal and scripts	`npm i -g @topy-ai/cso-cli && cso-cli login`

Server checks (host-quick, host-audit) and passive checks of sites you don't control (public-check) are not on topy.ai: they need a person on OneMan, with host consent granted by the person's own approval in the chat.

How the skills fit together

topy-cso-connect ─▶ topy-cso-setup (inventory · domain verify · consent) ─▶ topy-cso-goals

│ daily 06:17: topy-cso-daily-watch ─▶ topy-cso-cve-response ─▶ topy-cso-incident ─▶ topy-cso-fix-plan │ topy-cso-dependencies · topy-cso-end-of-life weekly Mon 07:23: topy-cso-weekly-report ─▶ the founder (email) and the CEO │ before code ships: topy-cso-secrets · topy-cso-code-scan · topy-cso-threat-model web (verified domains): topy-cso-domain-verify ─▶ topy-cso-web-checks ─▶ topy-cso-web-scan before you trust it: topy-cso-package-vet · topy-cso-vet-skill · topy-cso-mcp-audit

Try: *"Anything new I should worry about?"*, *"Are we affected by CVE-2026-…?"*, *"Did a key leak?"*, *"Is this MCP server safe to install?"*, *"Send the weekly security report"*

Packages

Package	What it is
`@topy-ai/cso-skills`	This installer (Claude Code, Codex, Pi, Cursor, Gemini CLI, …)
`@topy-ai/cso-mcp`	The CSO MCP server as a local stdio server (forwards to `https://topy.ai/mcp/cso`)
`@topy-ai/cso-cli`	The AI CSO on the command line

Repository structure

plugins/

topy-ai-cso/ core skills + .mcp.json (Claude Code) and mcp.json (Codex) topy-ai-cso-vulnerabilities/ topy-ai-cso-code/ topy-ai-cso-web/ topy-ai-cso-agents/ topy-ai-cso-response/ topy-ai-cso-all/ bundle that depends on all six .claude-plugin/marketplace.json Claude Code marketplace .agents/plugins/marketplace.json Codex marketplace skills.json machine-readable catalogue packages/skills/ the @topy-ai/cso-skills installer

The skills are generated from a source catalogue kept next to TOPY.AI's MCP server; the build checks every tool a skill names against the CSO server's tool list. Please open an issue rather than editing a SKILL.md.

License

Skills

19 skills in 6 plugins, plus the topy-ai-cso-all bundle. Generated from the source catalogue: please open an issue rather than editing a SKILL.md.

AI CSO core (MCP) · `topy-ai-cso`

Skill	Tier	What it does
`topy-cso-connect`	core	Connect the TOPY CSO MCP server and check what applies: the project's stack, verified domains, granted hosts, tools and feeds.
`topy-cso-daily-watch`	core	Every morning: new CVEs, advisories and end-of-life dates for everything the company runs, matched to the stack — quiet unless something new needs a person.
`topy-cso-goals`	core	The AI CSO's standing goals and its status report for the CEO: open critical exposure, secrets in code, verified-only checks, vetted skills and MCP servers, incident timelines.
`topy-cso-setup`	core	First run for a new company or site: inventory the stack, verify each domain you own, and explain host consent — so every later check is allowed and complete.

Vulnerabilities & supply chain · `topy-ai-cso-vulnerabilities`

Skill	Tier	What it does
`topy-cso-cve-response`	connected	A named CVE or advisory: are we affected, where, how urgent, and the response plan — with an incident timeline from start to close.
`topy-cso-dependencies`	connected	Known vulnerabilities in every lockfile ecosystem and in JavaScript copied into the site, prioritised, with the fixed versions.
`topy-cso-end-of-life`	connected	Runtimes, databases, web servers and operating systems that stopped (or will soon stop) getting security fixes, and what to upgrade to.
`topy-cso-package-vet`	connected	Before adding a package: known vulnerabilities and malicious-package reports for that exact version, and a clear install / pin / don't install.

Code & secrets · `topy-ai-cso-code`

Skill	Tier	What it does
`topy-cso-code-scan`	connected	Unsafe code patterns before they ship — injection, unsafe deserialisation, personal data in logs, weak crypto — with the safe pattern for each.
`topy-cso-secrets`	connected	Keys, tokens and passwords in the code, its git history and the build output — and the rotate-first fix for each.
`topy-cso-threat-model`	connected	A STRIDE threat model of the system and an OWASP ASVS checklist filled from the findings — what could go wrong and how far we meet the standard.

Web surface · `topy-ai-cso-web`

Skill	Tier	What it does
`topy-cso-domain-verify`	connected	Prove the company controls a domain (DNS TXT record or a token file) before any active check — the CSO never scans a site that isn't verified.
`topy-cso-web-checks`	connected	Grade a verified site's HTTP security headers and cookies (A+ to F) and its TLS (protocols, certificate trust and expiry), with the exact fix for each.
`topy-cso-web-scan`	connected	A safe, rate-limited vulnerability scan (known flaws, exposed files, misconfigurations) of a site the company has verified — never exploitation.

Agent & MCP security · `topy-ai-cso-agents`

Skill	Tier	What it does
`topy-cso-mcp-audit`	connected	OWASP MCP checks on the company's own MCP tool registry: read-only hints, destructive tools behind confirmation, scopes, audit logging and hosts it may call.
`topy-cso-vet-skill`	connected	Before a skill, plugin or MCP server is installed or published: prompt-injection, data exfiltration, over-broad permissions and risky tools — the App Factory security gate.

Response & reporting · `topy-ai-cso-response`

Skill	Tier	What it does
`topy-cso-fix-plan`	connected	Turn the findings into a reviewed runbook — each action tagged T1 (batch-safe) to T4 (stage first) — that a person reviews and runs. The CSO never applies it.
`topy-cso-incident`	connected	Record a security incident or CVE response from start to close — what happened, every step and who did it — so nothing is lost and the report writes itself.
`topy-cso-weekly-report`	connected	Every Monday: what is open by priority, what was fixed, what changed in the stack, and at most three actions — for the Founder by email and for the CEO.

TOPY.AI · AI CSO

概览

PopNx MCP 的三大支柱

它能帮你做什么

安装

安装之前

或者在你的电脑上运行

或者在你的电脑上运行

或者在你的电脑上运行

或者在你的电脑上运行

需要你填写的值

它能做什么

基础检查i

作者与仓库一致

仍在维护

有许可证

端点有响应

使用 OAuth 登录

工具描述中没有隐藏指令

与“其他”中的其他服务器比较i

常见问题

替代选择

Spec Driven Development

Remote Desktop Commander

topo^alpin

作者的 README

Install

Connect TOPY.AI

How the skills fit together

Packages

Repository structure

License

Skills

AI CSO core (MCP) · topy-ai-cso

Vulnerabilities & supply chain · topy-ai-cso-vulnerabilities

Code & secrets · topy-ai-cso-code

Web surface · topy-ai-cso-web

Agent & MCP security · topy-ai-cso-agents

Response & reporting · topy-ai-cso-response

AI CSO core (MCP) · `topy-ai-cso`

Vulnerabilities & supply chain · `topy-ai-cso-vulnerabilities`

Code & secrets · `topy-ai-cso-code`

Web surface · `topy-ai-cso-web`

Agent & MCP security · `topy-ai-cso-agents`

Response & reporting · `topy-ai-cso-response`