plug.directory
Add my server

RelayShield Agentic Attack Surface (AWS Marketplace)

by relayshieldadminco.huggingface.relayshieldadmin/relayshield-agentic-attack-surface-aws

  • Remote endpoint
  • 13 tools
  • relayshield_agentic_attack_surface_aws_check_agent_risk_summary Composite risk check -- one call instead of four. Runs breach exposure, LLM credential exposure, and tech-stack CVE checks together and returns a single fused risk verdict, so a calling agent doesn't have to make multiple tool calls and reason about how to combine their results itself. Returns: A structured result combining all sub-checks that were run, with the, highest severity found across them driving the overall outcome.
  • relayshield_agentic_attack_surface_aws_check_bulk_identity_risk Hierarchical org + AI-agent-identity risk scoring for a domain and up to 5 agent/service-account identities. A critically-exposed agent automatically elevates the organizational risk rating. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_llm_credential_exposure Check a domain for exposed LLM/AI provider API keys (OpenAI, Anthropic, Google, Groq, xAI, Replicate) in criminal stealer logs -- LLMjacking, a fast-growing threat where a leaked key becomes a live, uncapped billing liability rather than just a data exposure. Real incidents have run from tens of thousands of dollars per day to a $500K single-month bill from one leaked, unthrottled key. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_mcp_server_risk Check an MCP server URL for typosquat risk, presence in RelayShield's criminal IOC corpus, and domain-registration age. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_nhi_exposure Check a domain, or up to 10 vendor domains, for exposed non-human- identity (NHI) credentials — API keys, service-account tokens, personal access tokens, and other machine identities found in criminal stealer logs. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_oauth_watchlist Check an email for OAuth-connected-app exposure: apps matched against breach history, plus stolen OAuth/session tokens found in criminal stealer logs. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_prompt_injection_breach Check an email address for credential exposure sourced specifically from prompt-injection attacks against AI agents, distinct from ordinary phishing/malware-sourced breaches. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_secret_scan Check a domain, or up to 5 vendor domains, for secrets and credentials exposed in public GitHub/GitLab repositories. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_server_status Check which RelayShield tools and data sources are currently live on this MCP server -- a lightweight introspection call for an agent (or a human debugging) to confirm connectivity and see what's available before making a real check. Requires no API key. Returns: A structured result listing available tools and a live upstream connectivity check.
  • relayshield_agentic_attack_surface_aws_check_session_risk Check an email for active or reusable stolen session material (cookies, tokens) found in criminal stealer logs — exposure that can bypass MFA/authentication entirely, not just a password. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_supply_chain Check up to 10 vendor domains for breach and infostealer exposure — third-party and supply-chain risk inherited through vendor relationships. Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_check_tech_stack_cve Check a declared AI agent framework / tech stack for CISA KEV or high-EPSS CVEs actively being exploited. Covers AI agent orchestration frameworks (LangChain, CrewAI, AutoGPT, Flowise, n8n self-hosted) and common companion infrastructure (Nacos, MinIO). Returns: A structured result: outcome/recommended_action plus evidence and reason codes.
  • relayshield_agentic_attack_surface_aws_get_stix_indicators Fetch RelayShield's IOC corpus as STIX 2.1 Indicator objects via the TAXII 2.1 feed -- for agents/tools that consume threat intel in STIX format directly (SIEM/TIP ingestion, correlation engines) rather than RelayShield's own JSON shape. Requires a TI (Threat Intelligence) subscription API key, not just any metered key -- a standard metered key will get an auth error here, that's expected. Returns: A structured result with STIX 2.1 Indicator objects as evidence.

As the server's own listing gives them. We never call a tool.