{
  "type": "mcp-server",
  "slug": "chokepoint-finder-mcp",
  "name": "Chokepoint Finder MCP Server",
  "author": "tarhou",
  "description": "A FastMCP server that collapses findings into shared fixes, ranks them by marginal risk coverage, gates unsafe changes on fail-closed evidence, and verifies outcomes against the authoritative source.",
  "github_url": "https://github.com/tarhou/chokepoint-finder-mcp",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "vuln-management",
    "exposure-management",
    "remediation",
    "prioritization",
    "attack-path-analysis",
    "set-cover",
    "fail-closed",
    "mcp-server"
  ],
  "integrations": [
    "AWS",
    "Tenable"
  ],
  "domains": [
    "vulnerability-management"
  ],
  "date_added": "2026-08-05",
  "last_reviewed": "2026-08-05",
  "works_with_tenable_hexa_mcp": false,
  "transport": "stdio",
  "runtime": "python",
  "auth_method": "api-key",
  "compatible_clients": [
    "Claude Code",
    "Claude Desktop"
  ],
  "tools_exposed": [
    {
      "name": "chokepoint_setup",
      "description": "Reports what is configured, tests each connection, and names the exact missing variable rather than failing vaguely."
    },
    {
      "name": "chokepoint_ingest",
      "description": "Loads findings, assets and attack paths from a source and builds the engine baseline."
    },
    {
      "name": "chokepoint_rank",
      "description": "Greedy weighted max-coverage over synthesized actions; returns the ordered shortlist with marginal risk."
    },
    {
      "name": "chokepoint_preflight",
      "description": "Evidence gates before acting: EDR silence, change freeze, and blast radius."
    },
    {
      "name": "chokepoint_supply_evidence",
      "description": "Relays gate evidence in from an MCP server you already have connected, with provenance retained."
    },
    {
      "name": "chokepoint_payload",
      "description": "Ticket-ready remediation payload for a chokepoint: summary, justification, targets and rollback."
    },
    {
      "name": "chokepoint_plan",
      "description": "Typed, ordered execution workflow with per-site waves and a canonical SHA-256 plan hash."
    },
    {
      "name": "chokepoint_mark_executed",
      "description": "Records that approved steps were executed elsewhere, bound to the plan hash, wave and a one-time receipt."
    },
    {
      "name": "chokepoint_verify",
      "description": "Re-queries the authoritative source and diffs against the baseline, returning a structured proof receipt."
    },
    {
      "name": "chokepoint_demo",
      "description": "Runs the whole wave-aware loop on a deterministic simulated estate with no credentials."
    }
  ],
  "resources_exposed": [],
  "prompts_exposed": [],
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-08-10T21:44:58Z",
    "stars": 0,
    "forks": 0,
    "open_issues": 0,
    "owner_type": "user",
    "language": "Python",
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/mcp-servers/chokepoint-finder-mcp",
  "json_url": "https://exchange.tenable.com/api/mcp-servers/chokepoint-finder-mcp.json",
  "markdown_url": "https://exchange.tenable.com/mcp-servers/chokepoint-finder-mcp.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/chokepoint-finder-mcp.md"
}