Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
| Endpoint | https://agentsec.kernora.ai/mcp (streamable-http) |
|---|---|
| Registry version | 0.1.0 |
| Now | 2 tools · grade A (100) · pin ts_38c7b2ff8d6718788172d53866244150 · protocol 2025-06-18 |
| First / last listed | 2026-11-01 01:11 UTC / 2026-11-01 01:11 UTC |
| Grade over time | 2026-11-01: A (100), 2 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: get_security_baseline check_action
get_security_baseline | Return Kernora Agent Security's curated security baseline — the known-good rules an AI coding agent should follow (secrets, injection, supply-chain, destructive ops, data protection). Advisory grounding. params: none |
check_action | Advisory check: given a described action or command the agent is about to take, return the baseline security factlets that plausibly apply, so the agent can self-correct. Advisory only — does NOT block. Real-time blocking is Kernora Agent Security's paid Integrity Plane. params: action* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.