Ostorlab
by FastDrop
Query and act on your Ostorlab scans, vulnerabilities, tickets and assets.
Query and act on your Ostorlab scans, vulnerabilities, tickets and assets. Official MCP Registry: co.ostorlab/mcp@1.0.0. Remote endpoint: https://api.ostorlab.co/apis/mcp/{api_key}/
Problem it solves
Discoverable MCP server listed in the official MCP Registry.
How it's different
Remote MCP endpoint ingested from the official registry and probed by FastDrop.
Ingested from the official MCP Registry
FastDrop pulled this entry from the official MCP Registry as co.ostorlab/mcp and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed
and the description is not theirs.
If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.
Claim this listingTools this endpoint exposes
Read directly from the endpoint on 26 Oct 2026. Not supplied by the maker.
meDescribe the calling API key and the organisation it belongs to. The caller is an API key, not a user account. Args: ctx: The MCP request context holding connection parameters. Returns: The
list_vulnerabilitiesList vulnerabilities for the authenticated organisation with optional filtering. Object-level scoping is performed at the scan level via the same ``shared_access.access.get_scan_with_access`` helper
search_vulnerabilitiesFind findings across every scan, filtered by application, date and severity. Reach for this whenever the question spans more than one scan — "all criticals on this app", "what did we find last month"
get_vulnerabilityGet detailed information for a single vulnerability by database id. Args: ctx: FastMCP Context holding connection path parameters. vulnerability_id: The database id of the vulnerability. Ret
update_vulnerabilityUpdate a vulnerability's risk rating, CVSS vectors, or triage status. Mirrors the GraphQL ``customizeVulnerabilities`` mutation. With ``all_vulnerabilities=True`` the update is applied to every vulne
list_scansList scans for the authenticated organisation with optional filtering. The non-archived path reuses ``query_helper.query_scans`` (the GraphQL scan scoping: organisation, visibility and object-level a
get_scanGet detailed information for a single scan by database id. Access is resolved through ``shared_access.access.get_scan_with_access`` so object-level access matches GraphQL. Archived scans are not serv
get_scan_statusGet a scan's progress state, start/end times and errors. Mirrors the GraphQL resolvers: ``state`` is the latest ``key="progress"`` value (``resolve_progress``), ``start_time`` is ``Scan.created_time`
Is this tool yours?
Claim this listing, then prove you own the domain with one DNS record: once it matches, the listing is yours right away.
Sign in to claim this listingSimilar launches
Matched on shared tags and the tools their MCP servers actually expose.
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Reviews
Sign in to leave a review.
No reviews yet.
Comments
Sign in to join the discussion.
No comments yet - start the discussion.
