English Français العربية

TOPY.AI · AI CSO

Official registry Security

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http topy-ai-ai-cso 'https://topy.ai/mcp/cso'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "topy-ai-ai-cso": {
            "type": "http",
            "url": "https://topy.ai/mcp/cso"
        }
    }
}
NPM package @topy-ai/cso-mcp
Claude Code 
claude mcp add topy-ai-ai-cso -e 'TOPY_API_KEY=<your topy_api_key>' -- npx -y @topy-ai/cso-mcp@0.1.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "topy-ai-ai-cso": {
            "command": "npx",
            "args": [
                "-y",
                "@topy-ai/cso-mcp@0.1.0"
            ],
            "env": {
                "TOPY_API_KEY": "<your topy_api_key>"
            }
        }
    }
}

Environment variables

  • TOPY_API_KEY secret A TOPY API key (Dashboard → API keys); or run `npx @topy-ai/cso-mcp login` once instead.

Frequently asked questions

What is TOPY.AI · AI CSO?

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

How do I install TOPY.AI · AI CSO?

It runs as a remote server. In Claude Code: claude mcp add --transport http topy-ai-ai-cso 'https://topy.ai/mcp/cso'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does TOPY.AI · AI CSO need an API key?

Yes. It expects TOPY_API_KEY, which you set in its configuration.

Is TOPY.AI · AI CSO open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains TOPY.AI · AI CSO?

It is published by TOPY-AI-LTD. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.