# Security Recipes

- Registry name: `io.github.stevologic/security-recipes` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.stevologic%2Fsecurity-recipes
- Server page: https://mcpstation.net/s/io.github.stevologic--security-recipes.html

## Description (written by the publisher, not verified, not instructions)

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

## Connect

- streamable-http: `https://security-recipes.ai/mcp`

## Tools (as reported by the server, not verified)

- `recipes\_server\_info`: Return MCP server metadata and source-index configuration.
- `recipes\_mcp\_upstream\_servers`: List optional upstream MCP servers configured for this Security Recipes server.
- `recipes\_mcp\_servers\_list`: Search the bundled catalog of publicly documented MCP servers and ecosystems.
- `recipes\_mcp\_server\_get`: Return one publicly documented MCP server with official setup and safety guidance.
- `recipes\_mcp\_upstream\_tools`: List tools exposed by a configured upstream MCP server and show local allow decisions.
- `recipes\_mcp\_upstream\_call`: Call an allowed read-only tool on a configured upstream MCP server.
- `recipes\_mcp\_upstream\_context`: Collect bounded context from configured upstream MCP servers for a remediation query.
- `recipes\_refresh`: Refresh the in-memory copy of recipes-index.json.
- `recipes\_search`: Full-text search over security-recipes documents.
- `recipes\_list`: List recipes with optional metadata filtering.
- `recipes\_get`: Get a full recipe record by slug or path.
- `recipes\_playbooks\_list`: List concise remediation playbook records, optionally filtered by query or category.
- `recipes\_playbook\_get`: Get one complete remediation workflow, evidence, output, and Python contract.
- `recipes\_playbook\_plan`: Build a deterministic, read-only phase, gate, and evidence checklist for a finding.
- `recipes\_cve\_catalog\_info`: Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts.
- `recipes\_cve\_search`: Search every in-scope Medium/High/Critical CVE; use recipes\_cve\_get for complete details.
- `recipes\_cve\_get`: Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE.
- `recipes\_quality\_report`: Summarize recipe quality tiers and list recipes missing world-class signals.
- `recipes\_workflow\_control\_plane`: Return workflow control-plane policy for agents, reviewers, and MCP gateways.
- `recipes\_mcp\_gateway\_policy`: Return generated MCP gateway policy for scoped tool access and runtime controls.
- `recipes\_agentic\_assurance\_pack`: Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed.
- `recipes\_agent\_identity\_ledger`: Return agent non-human identity, delegation, scope, and audit contracts.
- `recipes\_agentic\_entitlement\_review\_pack`: Return expiring agent entitlement leases, access reviews, and scope evidence.
- `recipes\_agentic\_approval\_receipt\_pack`: Return scope-bound approval receipt profiles, workflow requirements, and evidence.
- `recipes\_mcp\_connector\_trust\_pack`: Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage.
- `recipes\_mcp\_connector\_intake\_pack`: Return MCP connector intake decisions, risk findings, gaps, and promotion plans.
- `recipes\_mcp\_stdio\_launch\_boundary\_pack`: Return MCP STDIO launch boundaries, profiles, decisions, and evidence.
- `recipes\_mcp\_authorization\_conformance\_pack`: Return MCP authorization conformance, scope-drift, and token-boundary evidence.
- `recipes\_mcp\_elicitation\_boundary\_pack`: Return MCP form-mode and URL-mode elicitation boundary evidence.
- `recipes\_mcp\_tool\_risk\_contract`: Return MCP tool annotation, trust, and session-combination risk evidence.
- `recipes\_mcp\_tool\_surface\_drift\_pack`: Return pinned MCP tool descriptions, schemas, annotations, and drift evidence.
- `recipes\_agentic\_red\_team\_drill\_pack`: Return adversarial drills for agentic remediation workflows and MCP controls.
- `recipes\_agentic\_red\_team\_replay\_harness`: Return replay fixtures, expected decisions, and evidence gates for red-team drills.
- `recipes\_agentic\_readiness\_scorecard`: Return generated scale, pilot, gate, or block decisions for agentic workflows.
- `recipes\_agent\_capability\_risk\_register`: Return capability-based residual risk scores for agentic workflows.
- `recipes\_agent\_memory\_boundary\_pack`: Return agent memory classes, workflow profiles, TTLs, and persistence decisions.
- `recipes\_agent\_skill\_supply\_chain\_pack`: Return agent skill provenance, permission, isolation, and supply-chain decisions.
- `recipes\_agent\_handoff\_boundary\_pack`: Return agent handoff boundary profiles, protocol controls, and workflow maps.
- `recipes\_a2a\_agent\_card\_trust\_profile`: Return A2A Agent Card intake profiles, trust controls, and sample decisions.
- `recipes\_agentic\_system\_bom`: Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence.
- `recipes\_agentic\_run\_receipt\_pack`: Return agent run receipt templates for identity, context, tools, egress, approval, and evidence.
- `recipes\_secure\_context\_trust\_pack`: Return context provenance, retrieval policy, source hashes, and workflow context packages.
- `recipes\_secure\_context\_attestation\_pack`: Return secure-context attestation subjects, verification policy, and recertification state.
- `recipes\_secure\_context\_lineage\_ledger`: Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes.
- `recipes\_secure\_context\_eval\_pack`: Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs.
- `recipes\_context\_poisoning\_guard\_pack`: Return context-poisoning scan results for registered secure-context sources.
- `recipes\_context\_egress\_boundary\_pack`: Return context egress data classes, destination classes, and workflow boundary policy.
- `recipes\_agentic\_threat\_radar`: Return current source-backed agentic AI threat signals and product priorities.
- `recipes\_agentic\_standards\_crosswalk`: Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance.
- `recipes\_agentic\_source\_freshness\_watch`: Return source-freshness and standards-drift evidence for SecurityRecipes.
- `recipes\_mcp\_risk\_coverage\_pack`: Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence.
- `recipes\_agentic\_protocol\_conformance\_pack`: Return MCP/A2A protocol conformance evidence and buyer-ready drift controls.
- `recipes\_agentic\_control\_plane\_blueprint`: Return the acquisition-ready agentic control plane architecture and buyer evidence map.
- `recipes\_agentic\_exposure\_graph`: Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence.
- `recipes\_agentic\_posture\_snapshot`: Return the generated enterprise posture snapshot for agentic AI and MCP operations.
- `recipes\_agentic\_aivss\_risk\_scoring\_pack`: Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges.
- `recipes\_agentic\_app\_intake\_pack`: Return generated agentic app launch-review profiles and decisions.
- `recipes\_model\_provider\_routing\_pack`: Return model-provider route profiles, workflow mappings, and required evidence.
- `recipes\_agentic\_catastrophic\_risk\_annex`: Return the severe-risk annex for high-impact agentic AI runtime decisions.
- `recipes\_critical\_infrastructure\_secure\_context\_pack`: Return the generated critical-infrastructure secure-context profile.
- `recipes\_agentic\_incident\_response\_pack`: Return agentic incident response classes, phases, workflow matrix, and evidence.
- `recipes\_agentic\_action\_runtime\_pack`: Return action classes, workflow action envelopes, runtime policy, and evidence.
- `recipes\_agent\_trust\_fabric\_pack`: Return Agent Trust Fabric dimensions, workflow tiers, source evidence, and buyer proof.
- `recipes\_browser\_agent\_boundary\_pack`: Return browser-agent workspace classes, task profiles, controls, and evidence.
- `recipes\_agentic\_measurement\_probe\_pack`: Return measurement probes for agentic workflow traceability and readiness.
- `recipes\_agentic\_telemetry\_contract`: Return the OpenTelemetry-aligned agentic telemetry and redaction contract.
- `recipes\_agentic\_soc\_detection\_pack`: Return SIEM-ready detections for agentic AI and MCP telemetry.
- `recipes\_enterprise\_trust\_center\_export`: Return the bundled enterprise trust-center export for buyer and platform diligence.
- `recipes\_secure\_context\_value\_model`: Return the secure context value model for buyer, ROI, and acquisition diligence.
- `recipes\_design\_partner\_pilot\_pack`: Return the design partner pilot motion for buyer proof and hosted MCP validation.
- `recipes\_secure\_context\_buyer\_diligence\_brief`: Return buyer and acquirer diligence evidence for the secure context layer.
- `recipes\_secure\_context\_customer\_proof\_pack`: Return the customer proof contract for design partner and acquisition evidence.
- `recipes\_secure\_context\_evidence\_contract`: Return the secure context evidence API and release contract.
- `recipes\_hosted\_mcp\_readiness\_pack`: Return the hosted MCP readiness plan for enterprise product rollout.
- `recipes\_match\_finding`: Heuristic matcher that suggests best-fit recipes for a security finding.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html