[ Machine access ]

For AI agents

Machine-readable access to the AI Security Directory. Prefer HTTP search when you do not need stdio MCP.

OpenAPI

Machine-readable spec for the unversioned public catalog: /openapi.json. Search and dump only. No auth.

Catalog search API

GET https://aisecuritydirectory.com/api/search?category=ai-soc-secops&q=triage
GET https://aisecuritydirectory.com/api/search?stage=seed,series-a&limit=20
GET https://aisecuritydirectory.com/api/search?limit=100

Params: category, stage (repeatable, comma-separable), tier, q, limit (default 50; if present, must be an integer from 1 to 100, else HTTP 400 JSON). Category and stage values are listed in /api/vendors.json.

Response fields: total (matches before limit), count (results returned this page), limit (applied cap), normalized, results. Prefer total for catalog size under a filter; unfiltered full size is also on the dump below.

Full dump

GET https://aisecuritydirectory.com/api/vendors.json

Shape: count, categoryCount, categories, vendors (full public fields, alphabetical by name), dataAsOf (latest catalog date_added), lastUpdated (response date).

llms.txt

/llms.txt (index: categories, shortlists, machine endpoints, counts) and /llms-full.txt (full catalog text, same vendor count as the JSON dump).

Human shortlists (alphabetical within category, not ranked): /best.

MCP server (stdio)

Zero-install is HTTP (above and below). The stdio MCP server is optional and runs from a clone today:

# from a clone of the repo:
node mcp-server/dist/index.js
# tools: search_vendors, get_vendor, check_if_listed, list_categories, submit_listing

Source: mcp-server/ in the repo. The npm package @aisecuritydirectory/mcp-server is not published yet, so npx -y @aisecuritydirectory/mcp-server does not work. Until it is published, run from a clone as above, or just use the HTTP APIs above (search and catalog only).

Submit a listing

Humans and agents: /submit (Tally form, free review queue, reviewed weekly). Direct API intake is closed: the former POST /api/submit and the MCP submit_listing tool now return an honest 503 pointing to the form. Read tools (search, catalog, check_if_listed) keep working.