Security & Testing

garphengate.com

Analyzes security scanner exports, cloud configuration dumps, and log exports to provide vulnerability triage, CVE exploitation checks against CISA KEV and EPSS, and ranked remediation reports.

x402 supported1 endpoint4 known toolsFirst detected September 27, 2026Last detected September 27, 2026

ENDPOINT 1

https://triage.garphengate.com/mcp

No auth detected

MCP server metadata

Name: garphengate
Version: 1.0.0

Capabilities

tools

Server instructions

GarphenGate turns security scanner output into a ranked, defensive triage report. Give it a vulnerability scan export (verified: Trivy JSON/SARIF; unit-tested: Nessus, Qualys; recognised with partial extraction: OpenVAS, Grype, AWS Inspector; or a CSV/JSON in a standard vulnerability layout — not arbitrary XML), a cloud configuration dump, or a log export, and it returns what to fix first and why. Workflow: call check_file first to see how a file will be read and what it would cost — that is free and analyses nothing. Then call triage_scan for the ranked report. Use check_exploitation for a fast, model-free answer to 'is any of this actually being exploited', which is usually the first question worth asking. Always pass environment_context when you know it. One sentence about what is internet-facing changes the ranking more than any other input. Scope: defensive analysis only. This server never returns exploit code, attack tooling or intrusion steps, and never scans or connects to any system — it reads only the file you give it.

Known tools 4

check_file

Inspect a security export WITHOUT analysing it: which scanner produced it, which analysis applies, how many findings it contains, how confident the detection is, and what a full paid analysis would cost.

Inferred read-only

check_exploitation

Look up CVE identifiers in CISA's Known Exploited Vulnerabilities catalogue and FIRST's EPSS scores.

Inferred read-only

triage_scan

Analyse a scanner export, cloud configuration dump or log export and return a ranked defensive report: what to fix first, what collapses into one root cause, what is safely deprioritised and why, with remediation for each finding and the evidence quoted from the supplied file.

Inferred read-only

list_analysis_types

The catalogue of analyses this service performs, with what each one needs as input and what it costs.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.garphengate]
url = "https://triage.garphengate.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "garphengate": {
      "type": "http",
      "url": "https://triage.garphengate.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: garphengate
Remote MCP URL: https://triage.garphengate.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "garphengate": {
      "url": "https://triage.garphengate.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "garphengate": {
      "type": "http",
      "url": "https://triage.garphengate.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "garphengate",
  "transport": "streamable-http",
  "url": "https://triage.garphengate.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for garphengate.com was fetched 2026-10-02T02:18:54.055Z.

Trust status Trusted

garphengate.com is assessed as Trusted: Domain runs a meaningful technology spend, consistent with a real business.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.