{"id":11179,"external_id":"plugin_asdk_app_6ae5e201c4988191a85b01ab398ac178","name":"anomity","display_name":"Anomity","developer":"Anomity","category":"Security","listing_language":"en","listing_language_details":{"method":"cld-0.13.0/listing-v1","reliable":true,"detected_at":"2026-11-05T00:06:48Z","input_sha256":"4955ce5dca661dbca3bb96a58276e141adadc45c1cb85c85bfb266d90517245c","source_fields":["release.description","release.interface.short_description","release.interface.long_description"]},"version":"0.1.0","skill_count":8,"first_seen_at":"2026-11-05T00:00:02.792Z","last_seen_at":"2026-11-06T18:00:05.466Z","last_changed_at":"2026-11-05T00:00:02.792Z","install_count":null,"search_matches":[],"research_summary":null,"research_reviewed_at":null,"metadata":{"canonical_app_id":"asdk_app_6ae5e201c4988191a85b01ab398ac178","connector_id":"asdk_app_6ae5e201c4988191a85b01ab398ac178","created_at":"2026-10-31T13:15:54.116165Z","discoverability":"LISTED","id":"plugin_asdk_app_6ae5e201c4988191a85b01ab398ac178","is_template":false,"is_template_instance":false,"name":"anomity","release":{"app_ids":["asdk_app_6ae5e201c4988191a85b01ab398ac178"],"app_manifest":{"apps":{"anomity":{"id":"asdk_app_6ae5e201c4988191a85b01ab398ac178","required":true}}},"app_templates":[],"description":"Ask about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding triage, device investigations and allowlist reviews.","display_name":"Anomity","id":"pluginrel_36367ad4a9b88191af1696dd48fae868","interface":{"brand_color":"#0E7C6E","capabilities":["Read your organization's AI security posture","Triage policy findings","Investigate a managed device","Review MCP servers and AI accounts","Review the audit trail and compliance readiness","Approve allowlist items you confirm (admins, when enabled)"],"category":"Security","composer_icon_dark_url":null,"composer_icon_url":"https://files.openai.com/content?id=file_0000000015948246967557009163770d","default_prompt":"Brief me on our AI security posture for the CISO","default_prompts":["Brief me on our AI security posture for the CISO","What should we fix first among our open findings?","Which MCP servers on our devices should worry us?"],"developer_name":"Anomity","logo_url":"https://files.openai.com/content?id=file_0000000082ac82108419a78397514579","logo_url_dark":null,"long_description":"Anomity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sensors deployed through your device management report that inventory to the Anomity console, where policies turn it into findings. This plugin reads that data for your organization.\n\nBrief leadership. Get a posture briefing built from live data: devices reporting, open and critical findings, personal AI accounts, unknown MCP servers, plaintext secrets found, and compliance scores.\n\nTriage findings. Group open findings by the policy that raised them, rank them by severity and reach, and get the practical fix for each group.\n\nInvestigate a device. Name a laptop or a person and see the AI tools, MCP servers, findings and recent changes on that machine.\n\nReview MCP servers. See which servers are official, community or unknown, how they run, what they can reach, and how many devices use them.\n\nWork the allowlist. See what is waiting for approval across AI tools, AI sites, model providers, MCP servers, extensions, plugins and skills. Admins can approve the items they confirm, when an owner has turned that on in Anomity Settings.\n\nAudit changes and compliance. Ask what changed in your AI tooling over the last 90 days, and where you stand on SOC 2, ISO 42001, the NIST AI RMF, the EU AI Act and the OWASP LLM Top 10.\n\nYou sign in with your Anomity console account, and you see what your console role allows, scoped to your organization. Secret values never leave the device and are never returned. Every tool reads data except one: approving allowlist items, which asks you to confirm the exact items first.","plugin_category_id":"security","privacy_policy_url":"https://anomity.ai/legal/privacy-policy/","screenshot_urls":[],"short_description":"AI tool risk across devices","terms_of_service_url":"https://anomity.ai/legal/terms-of-service/","website_url":"https://anomity.ai"},"keywords":["security","ai-governance","shadow-ai","mcp","compliance"],"onboarding_skill_name":"get-started","requires_local_executor":false,"skills":[{"description":"Answer what changed in the organization's AI tooling or Anomity settings over a period, from the Anomity audit trail. Use when the user asks what changed, what's new on the fleet, who changed a policy or approved something, or when an MCP server, permission, or AI tool first appeared or disappeared.","interface":{"brand_color":null,"default_prompt":null,"display_name":"audit-changes","icon_large_url":null,"icon_small_url":null,"iconography":"radar","short_description":"Answer what changed in the organization's AI tooling or Anomity settings over a period, from the Anomity audit trail. Use when the user asks what changed, what's new on the fleet, who changed a policy or approved something, or when an MCP server, permission, or AI tool first appeared or disappeared."},"name":"audit-changes","plugin_release_skill_id":"pluginrsk_6ae5e2039ef481919e25fdf3a544d5dc"},{"description":"Explain the organization's AI compliance readiness in Anomity across SOC 2, ISO 42001, ISO 42005, NIST AI RMF, the EU AI Act, and the OWASP LLM Top 10. Use when the user asks about audit readiness, a framework's score, which requirements are not passing, or how to prepare for an AI governance audit.","interface":{"brand_color":null,"default_prompt":null,"display_name":"compliance-readiness","icon_large_url":null,"icon_small_url":null,"iconography":"chart","short_description":"Explain the organization's AI compliance readiness in Anomity across SOC 2, ISO 42001, ISO 42005, NIST AI RMF, the EU AI Act, and the OWASP LLM Top 10. Use when the user asks about audit readiness, a framework's score, which requirements are not passing, or how to prepare for an AI governance audit."},"name":"compliance-readiness","plugin_release_skill_id":"pluginrsk_6ae5e203bf048191a133e5b49c388527"},{"description":"Set up Anomity after installing the plugin - confirm the connection works, explain what this account can see, and suggest first questions. Use when the user has just installed Anomity, runs its setup, or asks what Anomity can do or how to start.","interface":{"brand_color":null,"default_prompt":null,"display_name":"get-started","icon_large_url":null,"icon_small_url":null,"iconography":"bolt","short_description":"Set up Anomity after installing the plugin - confirm the connection works, explain what this account can see, and suggest first questions. Use when the user has just installed Anomity, runs its setup, or asks what Anomity can do or how to start."},"name":"get-started","plugin_release_skill_id":"pluginrsk_6ae5e205057c81919f6fac408c2b14f9"},{"description":"Investigate one managed device or one person's machine in Anomity. Use when the user names a laptop, hostname, or employee and asks what AI tools are on it, why it is risky, what its findings are, or what changed on it.","interface":{"brand_color":null,"default_prompt":null,"display_name":"investigate-device","icon_large_url":null,"icon_small_url":null,"iconography":"radar","short_description":"Investigate one managed device or one person's machine in Anomity. Use when the user names a laptop, hostname, or employee and asks what AI tools are on it, why it is risky, what its findings are, or what changed on it."},"name":"investigate-device","plugin_release_skill_id":"pluginrsk_6ae5e204d8c881919bc6ba4dd0486460"},{"description":"Write an AI security posture briefing from live Anomity data. Use when the user asks for an AI risk summary, a CISO or board update, a weekly security report, or how the organization is doing on AI tooling across its devices.","interface":{"brand_color":null,"default_prompt":null,"display_name":"posture-briefing","icon_large_url":null,"icon_small_url":null,"iconography":"chart","short_description":"Write an AI security posture briefing from live Anomity data. Use when the user asks for an AI risk summary, a CISO or board update, a weekly security report, or how the organization is doing on AI tooling across its devices."},"name":"posture-briefing","plugin_release_skill_id":"pluginrsk_6ae5e204f6348191bb7c307d4fdf058a"},{"description":"Review what is waiting for approval on the Anomity allowlist and, when the organization allows it, approve the items the user confirms. Use when the user asks what is pending approval, wants to clean up or reduce allowlist findings, or asks to approve AI tools, AI sites, model providers, MCP servers, extensions, plugins, or skills.","interface":{"brand_color":null,"default_prompt":null,"display_name":"review-allowlist","icon_large_url":null,"icon_small_url":null,"iconography":"hierarchy","short_description":"Review what is waiting for approval on the Anomity allowlist and, when the organization allows it, approve the items the user confirms. Use when the user asks what is pending approval, wants to clean up or reduce allowlist findings, or asks to approve AI tools, AI sites, model providers, MCP servers, extensions, plugins, or skills."},"name":"review-allowlist","plugin_release_skill_id":"pluginrsk_6ae5e203a7a0819182220acb43f8e7aa"},{"description":"Assess the MCP servers running across the organization's devices with Anomity. Use when the user asks which MCP servers are risky, unknown, or unapproved, what an MCP server can reach, or whether a specific MCP server is safe to allow.","interface":{"brand_color":null,"default_prompt":null,"display_name":"review-mcp-servers","icon_large_url":null,"icon_small_url":null,"iconography":"radar","short_description":"Assess the MCP servers running across the organization's devices with Anomity. Use when the user asks which MCP servers are risky, unknown, or unapproved, what an MCP server can reach, or whether a specific MCP server is safe to allow."},"name":"review-mcp-servers","plugin_release_skill_id":"pluginrsk_6ae5e203d6608191a7ed1e3327729d4c"},{"description":"Prioritize Anomity policy findings and decide what to fix first. Use when the user asks what to fix first, wants to triage or clean up the findings queue, or asks about the findings for a specific policy, AI tool, MCP server, severity, or assignee.","interface":{"brand_color":null,"default_prompt":null,"display_name":"triage-findings","icon_large_url":null,"icon_small_url":null,"iconography":"radar","short_description":"Prioritize Anomity policy findings and decide what to fix first. Use when the user asks what to fix first, wants to triage or clean up the findings queue, or asks about the findings for a specific policy, AI tool, MCP server, severity, or assignee."},"name":"triage-findings","plugin_release_skill_id":"pluginrsk_6ae5e204ff04819184944ae54ca2a4e9"}],"version":"0.1.0"},"scope":"GLOBAL","status":"ENABLED"},"research":null,"package_metadata":{"name":"anomity","author":{"url":"https://anomity.ai","name":"Anomity"},"license":"MIT","sources":[{"path":"plugin.json","sha256":"543c40496902e27163652a80c194b5be4ebdc6b6e9c693be2594900b295c923a"}],"version":"0.1.0","commerce":false,"homepage":"https://anomity.ai/docs/#the-anomity-mcp-server","keywords":["security","ai-governance","shadow-ai","mcp","compliance"],"repository":"https://github.com/Anomity-ai/openai-plugin","artifact_id":163738,"observed_at":"2026-11-06T07:22:42Z","support_url":"https://anomity.ai/docs/","capabilities":["Read your organization's AI security posture","Triage policy findings","Investigate a managed device","Review MCP servers and AI accounts","Review the audit trail and compliance readiness","Approve allowlist items you confirm (admins, when enabled)"],"field_sources":{"name":0,"author":0,"license":0,"version":0,"commerce":0,"homepage":0,"keywords":0,"repository":0,"support_url":0,"capabilities":0,"release_notes":0,"onboarding_skill":0,"review_case_counts":0,"commerce_description":0},"release_notes":"First release of Anomity: read your organization's AI security posture, with skills for posture briefings, finding triage, device investigations, MCP server and allowlist reviews, audit trail questions and compliance readiness.","onboarding_skill":"./skills/get-started/SKILL.md","extraction_version":1,"review_case_counts":{"negative":3,"positive":5},"conflicts_or_errors":[],"commerce_description":"This plugin sells nothing and processes no payments. It reads data from the user's existing Anomity organization."}}