About AI Surface
AI Surface is an MCP server in the Security category: find and govern the AI surfaces in your application code at PR time. Free, OSS, runs offline.
Install
git clone https://github.com/apisec-inc/AI-SurfaceThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (5)
APIsec platformWhich AI/API surfaces are actually exploitable
Parameters not published.
DAST (Burp, ZAP)Reachable web vulnerabilities
Parameters not published.
Observability (Helicone, LangSmith, Arize, Phoenix)What LLM calls happened at runtime
Parameters not published.
SAST (Semgrep, CodeQL)Code-pattern vulnerabilities
Parameters not published.
SCA (Snyk, Dependabot)Vulnerable dependencies
Parameters not published.
Ask AI
Ask AI about AI Surface
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.