{"protocolVersion":"0.3.0","name":"O3 Security","description":"Unified AI-native security platform covering code-to-runtime — agentic SAST/DAST, impact-aware SCA with function-level reachability, the BOM suite (SBOM/CBOM/AIBOM/HBOM/QBOM), supply-chain & malware defense, and eBPF runtime protection.","url":"https://mcp.o3.security/mcp","version":"1.0.0","documentationUrl":"https://o3.security/llms.txt","iconUrl":"https://o3.security/favicon.svg","provider":{"organization":"O3 Security, Inc.","url":"https://o3.security"},"preferredTransport":"JSONRPC","supportedInterfaces":[{"url":"https://mcp.o3.security/mcp","transport":"JSONRPC","protocol":"mcp","supportedProtocolVersions":["2025-03-26","2024-11-05"]}],"capabilities":{"streaming":true,"pushNotifications":false,"stateTransitionHistory":false},"defaultInputModes":["application/json","text/plain"],"defaultOutputModes":["application/json","text/markdown"],"securitySchemes":{"oauth2":{"type":"oauth2","description":"OAuth 2.0 — discover endpoints via the authorization-server metadata.","flows":{"authorizationCode":{"authorizationUrl":"https://app.o3.security/login","tokenUrl":"https://api.o3.security/auth/token","scopes":{"read":"Read access to scan results and intelligence","sca":"Software composition analysis","sast":"Static analysis","dast":"Dynamic analysis","cbom":"Cryptographic BOM / PQC assessment","bom":"Bill-of-materials generation","runtime":"Runtime security events"}}}}},"security":[{"oauth2":["read"]}],"skills":[{"id":"sca_query","name":"CVE & Reachability Lookup","description":"Look up a CVE/GHSA with CVSS, affected packages/products, EPSS exploitation probability, CISA KEV status, exploit intelligence, and reachability-aware remediation.","tags":["vulnerability","sca","cve","reachability"],"examples":["Is CVE-2021-44228 reachable in my dependency tree?"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/markdown"]},{"id":"malware_query","name":"Malicious Package Check","description":"Check an open-source package (npm, PyPI, etc.) for known malicious activity — backdoors, infostealers, typosquats — with IOCs and remediation.","tags":["malware","supply-chain","ioc"],"examples":["Is the PyPI package \"embiggen\" malicious?"]},{"id":"cbom_assess","name":"Cryptographic BOM / PQC Readiness","description":"Discover cryptographic algorithms, keys, and protocols across code and infrastructure; forecast quantum exposure and map NIST PQC migration paths.","tags":["cbom","pqc","cryptography","compliance"]},{"id":"bom_generate","name":"BOM Generation","description":"Generate SBOM, CBOM, AIBOM, HBOM, or QBOM with evidence mapped to regulatory frameworks (EU CRA, DORA, EO 14028, CERT-In, SEBI CSCRF).","tags":["sbom","cbom","aibom","compliance","cyclonedx","spdx"]},{"id":"runtime_events","name":"Runtime Security Events","description":"Fetch recent eBPF runtime security events — process-tree chaining, syscall anomalies, and network egress — including zero-days detected without a published CVE.","tags":["runtime","ebpf","zero-day","kubernetes"]}]}