Aribot Security Agent
An A2A client finds this agent by fetching the well-known path on the provider's own host. That is what makes an agent card different from every other agent artifact in this catalog: it is provider-published by construction — it cannot be derived, generated, or reconstructed on a provider's behalf.
Generate a threat model generate_threat_model
Create a threat model from a normalized architecture (ReactFlow nodes + edges). Aribot stores the components and generates the threats. Returns the diagram id.
threatmodelarchitecturediagramstridecreateRun a code security scan code_review_scan
Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix.
codescansastsecretssecurityreviewpipelineRun a platform / compliance scan compliance_scan
Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll.
cloudplatformcompliancescanawsazuregcpposturePlan a remediation (dry run) get_remediation
Compute a remediation plan for a threat or finding without applying it (dry run). Runs Aribot's governed remediation checks and returns the proposed steps.
remediationfixhealplandry runself-healingApply a remediation (governed) apply_remediation
Apply a remediation for real (mode=live). Goes through Aribot's governance checks (attack-path reachability, autonomy policy and the approval flow). If your policy requires approval it returns 'requires_approval' rather than acting.
remediationapplyhealfixauto-healgovernedapproveGet the traceability matrix get_traceability
Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics.
traceabilitymatrixcoveragecontrolsrequirementsmappingGet a diagram summary get_diagram_summary
Summary of a diagram: threat counts by severity, risk value, compliance and framework coverage.
summarydiagramthreatsriskseveritycompliancecoverageList threat-model diagrams list_diagrams
List your company's threat-model diagrams (id, name, last update), newest first, optionally filtered by part of the name.
diagramdiagramslistfindthreat modelarchitectureGet diagram insights get_insights
Code-security metrics for a diagram: the threat → finding → control metrics of its latest code-security scan. code_scan is null when the diagram has no scan yet.
insightsmetricscontrolsframeworkcoveragediagramVerify threats in code verify_threats_in_code
Verify whether modelled STRIDE/LINDDUN threats are mitigated in a scan's uploaded code or AST. If threat_id is provided, returns synchronous verdict; otherwise dispatches batch verification across all diagram threats.
verifycodethreatstraceabilitymitigationaststrideDiscover Shadow AI & APIs discover_shadow_ai
Scan connected repositories and network traffic for unmanaged LLMs, foundational model endpoints, vector databases, agent frameworks, and leaked API keys (async).
shadow aillmdiscoveryopenaianthropicvector dbapisGet compliance framework coverage get_framework_coverage
Get control-mapped coverage percentages, gap counts, and mapped controls for EU AI Act, DORA, NIST AI RMF, ISO 27001, SOC 2, etc.
complianceframeworkcoveragecontrolseu ai actdoranistisoCompany compliance status rollup compliance_status
Company-level compliance posture: per-framework posture from the daily cloud scans (checks passed/failed, controls tested/failing), plus threat and control metrics from code scans. Pass `framework` (e.g. 'ISO 27001') to get that framework's most-failing controls. Rates are percentages (0-100).
compliancestatuspostureauditframeworksrollupgatecontrolsgapsGenerate architecture & threat model from prompt generate_architecture
Generate a multi-tier cloud/AI architecture and auto-synthesize STRIDE/LINDDUN threat models, security requirements, and regulatory control mappings directly from a natural-language description. Runs in the background (a few minutes); returns the name the diagram is saved under.
architecturegeneratepromptcloudthreat modeldesignaistrideAudit architecture or scan against AI regulations run_ai_governance_audit
Audit an architecture diagram or code scan against statutory AI governance frameworks (EU AI Act 2024, EU DORA 2022, NIST AI RMF 1.0, ISO 42001). Evaluates article-by-article conformity, satisfied controls, open gaps, and generates actionable remediation guidance.
ai governanceeu ai actdoranist ai rmfiso 42001auditcomplianceconformityGet code-security findings get_code_findings
Findings from a code-security scan (SAST, secrets, dependencies): title, severity, file and line, CWE/OWASP category, status and the recommended fix. Latest completed scan when scan_id is omitted.
codefindingsvulnerabilitiessastsecretsissuescode reviewGet shadow-AI discoveries get_shadow_ai
AI usage found in your code and network traffic: provider, service type, model, endpoint, where it was found, risk level, classification and whether a hard-coded key was seen. Company-wide, or one scan with scan_id.
shadow aiai usagellmmodelsunsanctioneddiscoveryGet governed AI agents get_agent_governance
Your governed AI-agent fleet: each agent's id, name, cohort, whether it is active, its execution state (running, held, suspended), deviation score and the reason for any hold. Totals by state.
agentsagent governancefleetsuspendedai agentsnhiGet self-healing activity get_self_healing
Remediation (self-healing) history: each planned or applied fix with its threat, rule, resource, mode (dry run or live), status and outcome, plus whether autonomous live remediation is switched on for your company.
self-healingremediationfixeshistoryautonomyappliedList ticket destinations list_ticket_destinations
Trackers, routes and destinations this caller may send threats to (no credentials).
jiragithubgitlabazureservicenowtrackerrouteticketSend threats to a tracker file_threat_tickets
Send 1-50 threat report entries to the tracker their route points at (or `destination`). One ticket per threat per report; a repeat returns already_filed. dry_run=true returns the exact tickets without sending; a preview with public_repository=true goes to a public repository, visible to anyone. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent.
ticketissuejiragithubsendfiledeveloperGet tickets for threats get_threat_tickets
Tickets (tracker, number, state, assignee) for the given threat entries, or for a diagram.
ticketstatusissueSync ticket status now sync_threat_tickets
Pull the current state and assignee of this company's open tickets (max 50 per call, time-boxed). Returns {checked, changed, errors, remaining}; remaining > 0 means call again to continue. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent.
syncstatusticketAssign a threat assign_threat
Set the owner and due date of a threat entry; the linked ticket follows. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent.
assignownerdueComment on a pull request about threats comment_threat_on_change
For a completed pipeline scan of a pull request: post, or update, one comment per threat whose linked code the pull request changes. A re-run with nothing changed makes no calls. Returns each comment's status (posted, updated, skipped with the reason, failed). Public repositories are skipped with the reason 'public repository'. Error codes: permission_missing, role_missing, destination_not_found, already_filed, rate_limited, assignee_unmapped, no_route, no_entry, not_found, invalid, no_company, tracker_error, filed_unrecorded, outcome_unknown, not_attempted, not_configured, tracker_unreachable, unsupported. filed_unrecorded and outcome_unknown mean the ticket may already exist in the tracker; not_attempted means the item was not sent.
pull requestmerge requestcommentcodereviewthreat2026-10-29 from https://api.aribot.ayurak.com/.well-known/agent-card.json,
HTTP 200. The body was saved verbatim and is the sole source for
everything on this page — no field is inferred.
View the captured card.
Providers change what they serve; if this card has moved or changed shape,
the provider profile carries the
current state as of the last build.
Work with this as data
Every agent card here is available over the APIs.io API and to AI agents over MCP. A2A Agent Cards is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.