{"data":{"name":"com.atkvn/security-checks","title":"ATK Security Checks","description":"PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps","version":"0.3.1","websiteUrl":"https://atkvn.com/agent/","repositoryUrl":null,"remotes":[{"type":"streamable-http","url":"https://atkvn.com/agent/mcp"}],"packages":[],"status":"active","isLatest":true,"publishedAt":"2026-10-23T07:23:38.618Z","updatedAt":"2026-10-23T07:23:38.618Z","source":"official-registry","verification":"official","confidence":100,"stars":null,"sources":[{"source":"official-registry","sourceId":"com.atkvn/security-checks","verification":"official","confidence":100,"stars":null,"updatedAt":"2026-10-23T07:23:38.618Z","title":"ATK Security Checks","description":"PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps","websiteUrl":"https://atkvn.com/agent/","repositoryUrl":null}],"toolIndex":{"tools":[{"serverName":"com.atkvn/security-checks","endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","name":"audit_wazuh_rules","title":"Audit Wazuh custom rules","description":"Finds Wazuh custom rules that pass wazuh-analysisd -t but are dropped at load (load order across ruleset/rules and etc/rules, missing parents, duplicate or colliding ids). Input: list of {filename, xml}. Supported versions: 4.14.7, 4.14.9. Free: counts + 2 findings. Full report: pass api_key.","inputSchema":{"type":"object","properties":{"files":{"description":"Custom rule files, each {\"filename\": \"0094-local.xml\", \"xml\": \"<group>...</group>\"}; filename exactly as in /var/ossec/etc/rules/, up to 20 files.","items":{"additionalProperties":true,"type":"object"},"title":"Files","type":"array"},"wazuh_version":{"default":"4.14.9","description":"Wazuh manager version: 4.14.7 or 4.14.9.","title":"Wazuh Version","type":"string"},"api_key":{"default":"","description":"Optional key for the full report. Without it you get counts and 2 findings; the full report is also sold per call by x402 at POST https://atkvn.com/agent/v1/wazuh-audit.","title":"Api Key","type":"string"}},"required":["files"],"title":"audit_wazuh_rulesArguments"},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"definitionHash":"e90544224a02055647d18d3dbcfaf1a10f1cc5d77b4b5a31808dd72955d7192a","schemaStatus":"valid","origin":"official-registry","observedAt":"2026-11-03T17:46:54.754Z","metadataTrust":"untrusted"},{"serverName":"com.atkvn/security-checks","endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","name":"check_php2shell","title":"Check PHP2Shell (CVE-2026-109618/109619)","description":"Is this PHP install exposed to PHP2Shell, the two critical unauthenticated RCE flaws patched on 21 Oct 2026 (CVE-2026-109618, CVE-2026-109619)? Paste local evidence collected on the server: `php -v`, `php -i` or `php-fpm -i`, `cat /etc/os-release`, `dpkg -l 'php*'` or `rpm -qa 'php*'`. Returns patched / vulnerable / check_vendor_backport, the exact changelog command that decides distribution builds, upgrade commands, config mitigations until patched, and a tested Wazuh rule pack for crash and OOM signals. Free. Nothing is fetched from your servers.","inputSchema":{"type":"object","properties":{"evidence":{"description":"Raw output of the commands above, pasted as one text block (up to 20 KB).","title":"Evidence","type":"string"}},"required":["evidence"],"title":"check_php2shellArguments"},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"definitionHash":"f7d4a2fab077ee4dc235da092cd04f796e43f7d467d066d690ab61495d2a1740","schemaStatus":"valid","origin":"official-registry","observedAt":"2026-11-03T17:46:54.754Z","metadataTrust":"untrusted"},{"serverName":"com.atkvn/security-checks","endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","name":"check_post_quantum_tls","title":"Check post-quantum TLS","description":"Does this public hostname negotiate hybrid post-quantum key exchange (X25519MLKEM768)? Returns TLS version, hybrid yes/no and a one-line verdict. Free. One TLS handshake per probe, no scanning.","inputSchema":{"type":"object","properties":{"hostname":{"description":"Public DNS hostname, e.g. www.example.com. IP addresses and internal names are refused.","title":"Hostname","type":"string"}},"required":["hostname"],"title":"check_post_quantum_tlsArguments"},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"definitionHash":"ba1ad1ea650f06444082c3496e431bbc4af906992b8b907bf37c89205bee8cdc","schemaStatus":"valid","origin":"official-registry","observedAt":"2026-11-03T17:46:54.754Z","metadataTrust":"untrusted"},{"serverName":"com.atkvn/security-checks","endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","name":"check_tls_certificate","title":"Check TLS certificate","description":"Certificate issuer, expiry date, days left, and whether the chain verifies for the hostname from a strict client (catches missing intermediate certificates and name mismatches). Free.","inputSchema":{"type":"object","properties":{"hostname":{"description":"Public DNS hostname, e.g. www.example.com. IP addresses and internal names are refused.","title":"Hostname","type":"string"}},"required":["hostname"],"title":"check_tls_certificateArguments"},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"definitionHash":"3d3833cabbfd566268cf027d7cba7f34c5f76d8a76dc30f49510c6f71a805d75","schemaStatus":"valid","origin":"official-registry","observedAt":"2026-11-03T17:46:54.754Z","metadataTrust":"untrusted"},{"serverName":"com.atkvn/security-checks","endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","name":"test_wazuh_rule","title":"Test Wazuh rule on a real manager","description":"Runs log lines through a real wazuh-manager 4.14.9 (fresh logtest session) with your custom rules and decoders: which decoder and rule matched, whether YOUR rule fired, and load warnings such as 7617/7619. Logtest engine: frequency/timeframe rules and some live-only behaviour are out of scope. Free: 1 log line with your files (3 with the stock ruleset only), summary. 10 lines with decoded fields and full alerts: POST https://atkvn.com/agent/v1/wazuh-testfire (x402, USD 0.10).","inputSchema":{"type":"object","properties":{"logs":{"description":"Raw log lines exactly as the agent would forward them, one event per item.","items":{"type":"string"},"title":"Logs","type":"array"},"rules":{"default":[],"description":"Optional custom rule files: [{\"filename\": \"0096-local.xml\", \"xml\": \"<group>...</group>\"}]. Filename order matters: files load by name together with the stock ruleset.","items":{"additionalProperties":true,"type":"object"},"title":"Rules","type":"array"},"decoders":{"default":[],"description":"Optional custom decoder files, same shape as rules.","items":{"additionalProperties":true,"type":"object"},"title":"Decoders","type":"array"},"log_format":{"default":"syslog","description":"Wazuh log_format, e.g. syslog or json.","title":"Log Format","type":"string"}},"required":["logs"],"title":"test_wazuh_ruleArguments"},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"definitionHash":"85cc46d2452e07391419a44632b531f3618ea508d942e8bb99d8ce85c8253804","schemaStatus":"valid","origin":"official-registry","observedAt":"2026-11-03T17:46:54.754Z","metadataTrust":"untrusted"}],"endpoints":[{"endpointFingerprint":"cc8ae3f0499e886126f9ffe4682bb4893f758b1ca884af31ef0125a6800d6d0f","protocol":"streamable-http","status":"indexed","toolCount":5,"observedAt":"2026-11-03T17:46:54.754Z"}],"authentication":"unknown"},"connectionConfigurations":{"status":"ready","authentication":"not embedded","clients":{"Claude Desktop":{"mcpServers":{"com.atkvn/security-checks":{"url":"https://atkvn.com/agent/mcp"}}},"Cursor":{"mcpServers":{"com.atkvn/security-checks":{"url":"https://atkvn.com/agent/mcp"}}},"VS Code":{"servers":{"com.atkvn/security-checks":{"type":"http","url":"https://atkvn.com/agent/mcp"}}}}},"resourceType":"mcp-server","callable":true,"runtime":{"callable":true,"protocols":["mcp"]},"interfaces":[{"protocol":"mcp","transport":"streamable-http","url":"https://atkvn.com/agent/mcp"}],"profile":{"apiVersion":"1","schemaVersion":"1","id":"mcp-server:com.atkvn%2Fsecurity-checks","resourceType":"mcp-server","canonicalUrl":"https://www.agentsjunction.com/api/v1/servers/com.atkvn%2Fsecurity-checks","name":"com.atkvn/security-checks","description":"PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps","interfaces":[{"protocol":"mcp","transport":"streamable-http","url":"https://atkvn.com/agent/mcp"}],"capabilities":[],"identity":{"source":"official-registry","websiteUrl":"https://atkvn.com/agent/","repositoryUrl":null,"version":"0.3.1"},"verification":{"state":"official","confidence":100},"operations":{"resourceType":"mcp-server","name":"com.atkvn/security-checks","status":"online","lastCheckedAt":"2026-11-03T20:16:49.943Z","lastSuccessfulCheck":"2026-11-03T20:16:49.943Z","latencyMs":303,"consecutiveFailures":0,"isStale":false,"checks":{"endpointReachable":true,"protocolValid":true,"agentCardValid":null,"mcpHandshakeValid":true},"lastSeen":null,"lastSuccessfulInteraction":null,"lastHealthCheck":"2026-11-03T20:16:49.943Z","source":{"type":"health-check","url":null},"observedAt":"2026-11-03T20:16:49.943Z"},"security":null,"timestamps":{"createdAt":"2026-10-23T07:23:38.618Z","updatedAt":"2026-10-23T07:23:38.618Z","observedAt":"2026-11-03T20:16:49.943Z"},"compatibility":{"serverVersion":"0.3.1","protocolVersions":[{"protocol":"mcp","version":null}]}}}}