openaudit catalogue and docs (read-only) bronze

openaudit.se

“Read-only reference for openaudit, served from the openaudit.se website: look up auditors and their playbooks, search the docs, read the config schema and get install instructions. This server cannot run audits. To audit a codebase, URL, container or app, install the full local MCP server, which runs audits on the user's machine: `claude mcp add openaudit -- bunx @openaudit/cli mcp` (get_install_instructions has the setup for other clients).

https://openaudit.se/mcp its card

🇸🇪 SE · Cloudflare, Inc. Checked 5d ago tools

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 11 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (3)

openaudit.se, www.openaudit.se, *.www.openaudit.se.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 3 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “openaudit” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 26 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: MCP verified by handshake or card fetch, not merely advertised
Hosted in: 🇸🇪 SE · Cloudflare, Inc. (AS13335)
Last checked: 5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of openaudit.se controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

What kind of listing

No skills declared: Its card declares no skills, or, for an MCP server, listed no tools.

Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

openaudit catalogue and docs (read-only)

mcp-server-card

Read-only openaudit reference: the auditor catalogue, playbooks, docs search, config schema and install instructions. It cannot run audits; the local server (bunx @openaudit/cli mcp) does.

https://openaudit.se/.well-known/mcp/server-card.json

openaudit agent skill

agent-skills+md

Audit a project with openaudit — security, accessibility, performance, SEO, privacy, supply chain — for a codebase, URL, running web app, container, IaC or mobile build. Use when asked to audit, scan, or harden a project, check a site's headers/a11y/SEO, verify fixes against a previous audit, or run an openaudit playbook.

https://openaudit.se/.well-known/agent-skills/openaudit/SKILL.md

openaudit HTTP API (self-hosted)

vnd.oai.openapi

OpenAPI document of the HTTP API you run yourself from apps/server. openaudit.se does not host this API.

https://openaudit.se/openapi.json

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol: mcp
Version: 0.5.0

View all card details

Capabilities: tools
Agent card: https://openaudit.se/mcp

Operate this agent and would rather not be listed? Request removal.