{ "schemaVersion": 1, "mcpBroker": { "broker": "turen-mcp", "maxLoadedTools": 12 }, "extensions": [ { "schemaVersion": 1, "id": "turenlabs/bandit", "name": "Bandit", "description": "Scan Python code for common security issues", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "bandit", "name": "Bandit", "description": "Scan Python code for common security issues", "instructions": "Use Bandit for its declared purpose: Scan Python code for common security issues. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:bandit", "secrets": [], "defaultEnabled": false, "group": "sast", "commands": [ "bandit" ], "tools": { "allow": [ "bandit_scan" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/batou", "name": "Batou", "description": "Run automatic SAST on agent file writes", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "batou", "name": "Batou", "description": "Run automatic SAST on agent file writes", "instructions": "Use Batou for its declared purpose: Run automatic SAST on agent file writes. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:batou", "secrets": [], "defaultEnabled": false, "group": "sast", "commands": [ "batou" ], "tools": { "allow": [], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/checkov", "name": "Checkov", "description": "Scan infrastructure as code for misconfigurations", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "checkov", "name": "Checkov", "description": "Scan infrastructure as code for misconfigurations", "instructions": "Use Checkov for its declared purpose: Scan infrastructure as code for misconfigurations. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:checkov", "secrets": [], "defaultEnabled": false, "group": "iac", "commands": [ "checkov" ], "tools": { "allow": [ "checkov_scan" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/kev", "name": "CISA KEV", "description": "Check CVEs against the Known Exploited Vulnerabilities catalog", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "kev", "name": "CISA KEV", "description": "Check CVEs against the Known Exploited Vulnerabilities catalog", "instructions": "Use CISA KEV for its declared purpose: Check CVEs against the Known Exploited Vulnerabilities catalog. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:kev", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "kev_check", "kev_recent" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/cloudflare-audit-logs", "name": "Cloudflare Audit Logs", "description": "Search account audit activity through Cloudflare's provider-hosted MCP server", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "contributions": [ { "type": "mcp", "id": "cloudflare-audit-logs", "name": "Cloudflare Audit Logs", "description": "Search Cloudflare account audit logs by actor, action, resource, time, and request metadata", "instructions": "Use the selected Cloudflare account and bounded time ranges. Start with small result limits, paginate deliberately, and return large audit exports through artifact handles.", "adapter": "mcp:remote", "secrets": [ { "id": "CLOUDFLARE_API_TOKEN", "label": "Cloudflare API token", "required": false } ], "defaultEnabled": false, "configuration": [ { "id": "CLOUDFLARE_ACCOUNT_ID", "label": "Cloudflare account ID", "required": false } ], "tools": { "allow": [ "auditlogs_by_account_id" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 1, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-cloudflare-audit-logs-0.2.5", "deployment": { "transport": "streamable-http", "type": "hosted", "url": "https://auditlogs.mcp.cloudflare.com/mcp" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/cloudflare-casb", "name": "Cloudflare One CASB", "description": "Investigate SaaS integrations, assets, and asset categories through Cloudflare's hosted CASB MCP server", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "contributions": [ { "type": "mcp", "id": "cloudflare-casb", "name": "Cloudflare One CASB", "description": "Read Cloudflare One CASB integrations, discovered assets, and security-oriented asset categories", "instructions": "Keep CASB access scoped to the selected Cloudflare account. Search narrowly before listing assets broadly and return large inventories through artifact handles.", "adapter": "mcp:remote", "secrets": [ { "id": "CLOUDFLARE_API_TOKEN", "label": "Cloudflare API token", "required": false } ], "defaultEnabled": false, "configuration": [ { "id": "CLOUDFLARE_ACCOUNT_ID", "label": "Cloudflare account ID", "required": false } ], "tools": { "allow": [ "integration_by_id", "integrations_list", "assets_search", "asset_by_id", "assets_by_integration_id", "assets_by_category_id", "assets_list", "asset_categories_list", "asset_categories_by_vendor", "asset_categories_by_type", "asset_categories_by_vendor_and_type" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 6, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-cloudflare-casb-0.2.5", "deployment": { "transport": "streamable-http", "type": "hosted", "url": "https://casb.mcp.cloudflare.com/mcp" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/customize-forge", "name": "Customize Turen", "description": "Create and maintain Turen configuration, agents, commands, skills, and extensions", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "skill", "id": "customize-forge", "name": "Customize Turen", "description": "Instructions for configuring and extending Turen", "instructions": "Use this skill when configuring Turen agents, commands, permissions, or other supported configuration files. Preserve the current schema and restart after config changes.", "adapter": "skill:customize-forge", "secrets": [], "defaultEnabled": true, "tools": { "allow": null, "write": null }, "source": { "name": "customize-forge", "type": "embedded" } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/sandbox-daytona", "name": "Daytona Sandbox", "description": "Remote Daytona VM sandbox provider", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "sandbox-daytona", "name": "Daytona Sandbox", "description": "Remote Daytona VM sandbox provider", "instructions": "Use Daytona Sandbox for its declared purpose: Remote Daytona VM sandbox provider. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:sandbox-daytona", "secrets": [ { "id": "DAYTONA_API_KEY", "label": "Daytona API key", "required": true } ], "defaultEnabled": false, "group": "sandbox", "configuration": [ { "id": "apiUrl", "label": "API URL", "required": false }, { "id": "organization", "label": "Organization", "required": false }, { "id": "region", "label": "Region", "required": false }, { "id": "snapshot", "label": "Snapshot", "required": true }, { "id": "imageDigest", "label": "Pinned image digest", "required": true }, { "id": "guest", "label": "Guest OS", "required": true }, { "id": "guestAgentPath", "label": "Turen guest agent path", "required": true }, { "id": "cpu", "label": "Snapshot CPU cores", "required": true }, { "id": "memoryMib", "label": "Snapshot memory MiB", "required": true }, { "id": "diskMib", "label": "Snapshot disk MiB", "required": true } ], "tools": { "allow": [], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/depsdev", "name": "deps.dev", "description": "Query package health, advisories, licenses, scores, and dependency graphs", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "depsdev", "name": "deps.dev", "description": "Query package health, advisories, licenses, scores, and dependency graphs", "instructions": "Use deps.dev for its declared purpose: Query package health, advisories, licenses, scores, and dependency graphs. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:depsdev", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "depsdev_package_health", "depsdev_package_dependencies" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/epss", "name": "EPSS", "description": "Fetch FIRST.org exploit-probability scores for CVEs", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "epss", "name": "EPSS", "description": "Fetch FIRST.org exploit-probability scores for CVEs", "instructions": "Use EPSS for its declared purpose: Fetch FIRST.org exploit-probability scores for CVEs. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:epss", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "epss_score" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/websearch-exa", "name": "Exa Web Search", "description": "Search and retrieve current web content through Exa", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://exa.ai/", "contributions": [ { "type": "data", "id": "websearch-exa", "name": "Exa Web Search", "description": "Search and retrieve current web content through Exa", "instructions": "Use Exa Web Search for its declared purpose: Search and retrieve current web content through Exa. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "websearch:exa", "secrets": [ { "id": "EXA_API_KEY", "label": "Exa API key", "required": false } ], "defaultEnabled": true, "tools": { "allow": [ "websearch" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/exploitdb", "name": "Exploit-DB", "description": "Search the public exploit index by CVE or keyword", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "exploitdb", "name": "Exploit-DB", "description": "Search the public exploit index by CVE or keyword", "instructions": "Use Exploit-DB for its declared purpose: Search the public exploit index by CVE or keyword. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:exploitdb", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "exploitdb_search" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/ghsa", "name": "GitHub Advisories", "description": "Query the GitHub Security Advisory database", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "ghsa", "name": "GitHub Advisories", "description": "Query the GitHub Security Advisory database", "instructions": "Use GitHub Advisories for its declared purpose: Query the GitHub Security Advisory database. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:ghsa", "secrets": [ { "id": "GITHUB_TOKEN", "label": "GitHub token", "required": false } ], "defaultEnabled": false, "tools": { "allow": [ "ghsa_lookup" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/github-security", "name": "GitHub Security", "description": "Investigate code scanning, Dependabot, secret scanning, and security advisories through GitHub's hosted MCP server", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://github.com/github/github-mcp-server", "contributions": [ { "type": "mcp", "id": "github-security", "name": "GitHub Security", "description": "Read GitHub code security alerts, dependency alerts, secret scanning alerts, and advisories", "instructions": "Keep GitHub access read-only and scoped to repositories the user is authorized to inspect. Use Lockdown mode for public content, never enable insiders features by default, and return large alert sets through artifact handles.", "adapter": "mcp:remote", "secrets": [ { "id": "GITHUB_TOKEN", "label": "GitHub token", "required": false } ], "defaultEnabled": false, "tools": { "allow": [ "get_code_scanning_alert", "list_code_scanning_alerts", "get_dependabot_alert", "list_dependabot_alerts", "get_secret_scanning_alert", "list_secret_scanning_alerts", "get_global_security_advisory", "list_global_security_advisories", "list_org_repository_security_advisories", "list_repository_security_advisories", "run_secret_scanning" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 8, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-github-security-2026-08", "deployment": { "headers": { "X-MCP-Lockdown": "true", "X-MCP-Readonly": "true", "X-MCP-Tools": "run_secret_scanning", "X-MCP-Toolsets": "code_security,dependabot,secret_protection,security_advisories" }, "transport": "streamable-http", "type": "hosted", "url": "https://api.githubcopilot.com/mcp/" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/gitleaks", "name": "Gitleaks", "description": "Scan repositories and history for committed secrets", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "gitleaks", "name": "Gitleaks", "description": "Scan repositories and history for committed secrets", "instructions": "Use Gitleaks for its declared purpose: Scan repositories and history for committed secrets. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:gitleaks", "secrets": [], "defaultEnabled": false, "group": "secrets", "commands": [ "gitleaks" ], "tools": { "allow": [ "gitleaks_scan", "gitleaks_scan_history" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/grype", "name": "Grype", "description": "Scan for vulnerabilities and generate SBOMs", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "grype", "name": "Grype", "description": "Scan for vulnerabilities and generate SBOMs", "instructions": "Use Grype for its declared purpose: Scan for vulnerabilities and generate SBOMs. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:grype", "secrets": [], "defaultEnabled": false, "group": "dependencies", "commands": [ "grype", "syft" ], "tools": { "allow": [ "grype_scan", "syft_sbom" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/hibp", "name": "Have I Been Pwned", "description": "Check breached passwords and breach metadata", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "hibp", "name": "Have I Been Pwned", "description": "Check breached passwords and breach metadata", "instructions": "Use Have I Been Pwned for its declared purpose: Check breached passwords and breach metadata. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:hibp", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "hibp_password_pwned", "hibp_breach_lookup" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/sandbox-local-vm", "name": "Local VM", "description": "Disposable local VM sandbox for reverse engineering", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "sandbox-local-vm", "name": "Local VM", "description": "Disposable local VM sandbox for reverse engineering", "instructions": "Use Local VM for its declared purpose: Disposable local VM sandbox for reverse engineering. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:sandbox-local-vm", "secrets": [], "defaultEnabled": false, "group": "sandbox", "commands": [ "curl", "go", "hdiutil", "qemu-system-aarch64", "qemu-img", "/bin/ps" ], "tools": { "allow": [], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/microsoft-sentinel", "name": "Microsoft Sentinel", "description": "Investigate Microsoft Sentinel and Defender security data through provider-hosted MCP collections", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://learn.microsoft.com/en-us/azure/sentinel/datalake/sentinel-mcp-overview", "contributions": [ { "type": "mcp", "id": "microsoft-sentinel-data-exploration", "name": "Microsoft Sentinel Data Exploration", "description": "Discover Sentinel workspaces, inspect tables, and run scoped security data lake queries", "instructions": "Use only an explicitly selected Sentinel workspace. Keep queries narrow, avoid bulk export, and return large query results through artifact handles. This provider-hosted collection is prerelease functionality.", "adapter": "mcp:remote", "secrets": [], "defaultEnabled": false, "configuration": [ { "id": "AZURE_TENANT_ID", "label": "Microsoft Entra tenant ID", "required": false } ], "tools": { "allow": [ "list_sentinel_workspaces", "search_tables", "query_lake" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 3, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-microsoft-sentinel-data-exploration-2026-08", "deployment": { "transport": "http", "type": "hosted", "url": "https://sentinel.microsoft.com/mcp/data-exploration" }, "authentication": "oauth" }, { "type": "mcp", "id": "microsoft-sentinel-triage", "name": "Microsoft Sentinel Triage", "description": "Investigate Sentinel incidents, Defender alerts, entities, vulnerabilities, and remediation activity", "instructions": "Use incident, alert, machine, user, and vulnerability identifiers from the selected tenant. Treat advanced hunting as a bounded read operation and return large result sets through artifact handles. This provider-hosted collection is preview functionality.", "adapter": "mcp:remote", "secrets": [], "defaultEnabled": false, "configuration": [ { "id": "AZURE_TENANT_ID", "label": "Microsoft Entra tenant ID", "required": false } ], "tools": { "allow": [ "ListIncidents", "GetIncidentById", "ListAlerts", "GetAlertByID", "FetchAdvancedHuntingTablesOverview", "FetchAdvancedHuntingTablesDetailedSchema", "RunAdvancedHuntingQuery", "GetDefenderFileInfo", "GetDefenderFileStatistics", "GetDefenderFileAlerts", "GetDefenderFileRelatedMachines", "ListDefenderIndicators", "ListDefenderInvestigations", "GetDefenderInvestigation", "GetDefenderIpAlerts", "GetDefenderIpStatistics", "GetDefenderMachine", "GetDefenderMachineAlerts", "GetDefenderMachineLoggedOnUsers", "GetDefenderMachineVulnerabilities", "FindDefenderMachineByIp", "ListDefenderRemediationActivities", "GetDefenderRemediationActivity", "ListUserRelatedAlerts", "ListUserRelatedMachines", "ListDefenderMachinesByVulnerability", "ListDefenderVulnerabilitiesBySoftware" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 8, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-microsoft-sentinel-triage-2026-08", "deployment": { "transport": "http", "type": "hosted", "url": "https://sentinel.microsoft.com/mcp/triage" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/sandbox-modal", "name": "Modal Sandbox", "description": "Remote Modal VM sandbox provider", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "sandbox-modal", "name": "Modal Sandbox", "description": "Remote Modal VM sandbox provider", "instructions": "Use Modal Sandbox for its declared purpose: Remote Modal VM sandbox provider. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:sandbox-modal", "secrets": [ { "id": "MODAL_TOKEN_ID", "label": "Modal token ID", "required": true }, { "id": "MODAL_TOKEN_SECRET", "label": "Modal token secret", "required": true } ], "defaultEnabled": false, "group": "sandbox", "configuration": [ { "id": "environment", "label": "Environment", "required": false }, { "id": "region", "label": "Compute region", "required": false }, { "id": "appName", "label": "Modal app", "required": true }, { "id": "qualificationImage", "label": "Pinned qualification image", "required": true } ], "tools": { "allow": [], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/native-audit", "name": "Native Audits", "description": "Run native package-manager vulnerability audits", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "native-audit", "name": "Native Audits", "description": "Run native package-manager vulnerability audits", "instructions": "Use Native Audits for its declared purpose: Run native package-manager vulnerability audits. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:native-audit", "secrets": [], "defaultEnabled": false, "group": "dependencies", "commands": [ "npm", "pip-audit", "cargo", "govulncheck" ], "tools": { "allow": [ "native_dependency_audit" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/nvd", "name": "NVD", "description": "Query the NIST National Vulnerability Database", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "nvd", "name": "NVD", "description": "Query the NIST National Vulnerability Database", "instructions": "Use NVD for its declared purpose: Query the NIST National Vulnerability Database. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:nvd", "secrets": [ { "id": "NVD_KEY", "label": "NVD API key", "required": false } ], "defaultEnabled": false, "tools": { "allow": [ "nvd_cve_detail" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/opengrep", "name": "Opengrep", "description": "Run Semgrep-compatible static analysis rules", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "opengrep", "name": "Opengrep", "description": "Run Semgrep-compatible static analysis rules", "instructions": "Use Opengrep for its declared purpose: Run Semgrep-compatible static analysis rules. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:opengrep", "secrets": [], "defaultEnabled": false, "group": "sast", "commands": [ "opengrep" ], "tools": { "allow": [ "opengrep_scan" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/osv", "name": "OSV", "description": "Query the OSV.dev open source vulnerability database", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "data", "id": "osv", "name": "OSV", "description": "Query the OSV.dev open source vulnerability database", "instructions": "Use OSV for its declared purpose: Query the OSV.dev open source vulnerability database. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:osv", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "osv_query_package", "osv_get_vuln" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/osv-scanner", "name": "OSV-Scanner", "description": "Scan lockfiles and dependencies for known vulnerabilities", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "osv-scanner", "name": "OSV-Scanner", "description": "Scan lockfiles and dependencies for known vulnerabilities", "instructions": "Use OSV-Scanner for its declared purpose: Scan lockfiles and dependencies for known vulnerabilities. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:osv-scanner", "secrets": [], "defaultEnabled": false, "group": "dependencies", "commands": [ "osv-scanner" ], "tools": { "allow": [ "osv_scanner_scan" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/pagerduty", "name": "PagerDuty", "description": "Investigate incidents, on-call assignments, and schedules through PagerDuty's provider-hosted MCP service", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://developer.pagerduty.com/docs/mcp-tooling-remote-server", "contributions": [ { "type": "mcp", "id": "pagerduty", "name": "PagerDuty", "description": "Read PagerDuty incidents, on-call assignments, schedules, and current user context", "instructions": "Use least-privilege PagerDuty OAuth or a user token and keep access read-only. Do not admit incident management, responder, service, schedule override, orchestration, status-page, escalation-policy, webhook, or newly discovered write tools without explicit review.", "adapter": "mcp:remote", "secrets": [ { "id": "PAGERDUTY_API_TOKEN", "label": "PagerDuty API token", "required": false } ], "defaultEnabled": false, "tools": { "allow": [ "get_user_data", "list_incidents", "get_incident", "list_oncalls", "list_schedules" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 5, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-pagerduty-22adbf1", "deployment": { "transport": "streamable-http", "type": "hosted", "url": "https://mcp.pagerduty.com/mcp" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/websearch-parallel", "name": "Parallel Web Search", "description": "Research current web content through Parallel", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://parallel.ai/", "contributions": [ { "type": "data", "id": "websearch-parallel", "name": "Parallel Web Search", "description": "Research current web content through Parallel", "instructions": "Use Parallel Web Search for its declared purpose: Research current web content through Parallel. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "websearch:parallel", "secrets": [ { "id": "PARALLEL_API_KEY", "label": "Parallel API key", "required": false } ], "defaultEnabled": true, "tools": { "allow": [ "websearch" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] }, { "schemaVersion": 1, "id": "turenlabs/sentry", "name": "Sentry", "description": "Investigate application errors and events through Sentry's provider-hosted MCP service", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "homepage": "https://docs.sentry.io/product/sentry-mcp/", "contributions": [ { "type": "mcp", "id": "sentry", "name": "Sentry", "description": "Search Sentry issues and events and retrieve scoped Sentry resources", "instructions": "Scope access to one Sentry organization and project whenever possible. Keep queries bounded and do not admit update_issue, analyze_issue_with_seer, execute_sentry_tool, or newly discovered tools without a separate policy review.", "adapter": "mcp:remote", "secrets": [], "defaultEnabled": false, "tools": { "allow": [ "search_issues", "search_events", "get_sentry_resource" ], "write": [] }, "mcpContext": { "broker": "turen-mcp", "loading": "lazy", "maxLoadedTools": 3, "unloadAfterIdleTurns": 3, "maxInlineResultBytes": 65536 }, "upstreamPolicy": "audited-sentry-a2cb97f", "deployment": { "transport": "streamable-http", "type": "hosted", "url": "https://mcp.sentry.dev/mcp" }, "authentication": "oauth" } ], "versions": [ { "version": "1.0.0", "published": "2026-08-15" } ] }, { "schemaVersion": 1, "id": "turenlabs/trivy", "name": "Trivy", "description": "Scan workspaces for vulnerabilities and misconfigurations", "version": "1.0.0", "publisher": "Turen Labs", "trust": "official", "contributions": [ { "type": "tool", "id": "trivy", "name": "Trivy", "description": "Scan workspaces for vulnerabilities and misconfigurations", "instructions": "Use Trivy for its declared purpose: Scan workspaces for vulnerabilities and misconfigurations. Keep results scoped to the requested workspace and do not grant undeclared access.", "adapter": "security:trivy", "secrets": [], "defaultEnabled": false, "group": "dependencies", "commands": [ "trivy" ], "tools": { "allow": [ "trivy_scan", "trivy_config_scan" ], "write": [] } } ], "versions": [ { "version": "1.0.0", "published": "2026-08-08" } ] } ] }