Ostorlab
Query and act on your Ostorlab scans, vulnerabilities, tickets and assets.
What it does
Ostorlab is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · not tested by Electra IndexHosted endpoint
https://api.ostorlab.co/apis/mcp/{api_key}/streamable-http
The endpoint contains a placeholder to replace with your own value (see the publisher's docs).
No ready-made settings: the registry entry does not contain everything needed. Follow the publisher's instructions.
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Review pull requests Security Scanning | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- MCP Safety WardenREMOTELOCALMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution
- DepsonarREMOTELOCALDependency audits, live CVE scans, migration detection and stack health across 9 languages
- Seal SecurityREMOTELOCALVulnerability management: scan projects, search sealed packages, manage sealing rules and reports
Ready-made AI agents
- $20/mo
- $18/mo · free plan
- $24/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://api.ostorlab.co/apis/mcp/{api_key}/ | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Website | https://docs.ostorlab.co/api/mcp.html | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
Change history
- NEW26 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Ostorlab still online?
Free alerts · no accountAre you the publisher of Ostorlab?
Free · show your listingAn independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.
<a href="https://electraindex.com/mcp/ostorlab?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/ostorlab" alt="Listed on Electra Index"></a>Questions about Ostorlab
How do I connect Ostorlab?
Use the hosted endpoint https://api.ostorlab.co/apis/mcp/{api_key}/ in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What can I use Ostorlab for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.