io.github.RobotFleet-HQ/security-orchestra

Official

by RobotFleet-HQ · TypeScript

Multi-agent MCP platform for data centers and critical power.

io.github.RobotFleet-HQ/security-orchestra MCP Server

This MCP server is a multi-agent platform aimed at data centers and critical power infrastructure. The included README describes “Security Orchestra” as combining many specialized AI agents and compound processing chains, and it reports MCP and A2A compatibility plus transport support via SSE or stdio.

🛠️ Key Features

Multi-agent MCP platform for data centers and critical power
50+ specialized AI agents
8 compound chains
Labeled as “MCP Compatible” and “A2A Compatible”
Transport listed as “SSE | stdio”

🚀 Use Cases

Data center operations focused on critical power infrastructure

⚡ Developer Benefits

Integration target includes MCP and A2A compatibility
Transport support includes SSE and stdio

⚠️ Limitations

No additional tool list, capabilities, or detailed API behavior provided in the available excerpt

README.md14 KBView on GitHub

Security Orchestra

50+ specialized AI agents & 8 compound chains for data center critical power infrastructure.

Installation

Claude Desktop (hosted)

Add to your claude_desktop_config.json:

json

{
  "mcpServers": {
    "security-orchestra": {
      "url": "https://security-orchestra-orchestrator.onrender.com",
      "transport": "sse"
    }
  }
}

Claude Code (CLI)

bash

claude mcp add security-orchestra https://security-orchestra-orchestrator.onrender.com --transport sse

npx (Smithery)

bash

npx -y @smithery/cli@latest mcp add robotfleet-hq/security-orchestra

Install via Smithery.

Restart your MCP client. All tools are immediately available.

What It Does

Security Orchestra provides deterministic, standards-based calculations for every phase of data center infrastructure — from site selection to commissioning. Every agent returns structured JSON with citations to applicable codes (NEC, NFPA, IEEE, ASHRAE, Uptime Institute).

Tool Categories

Category	Agents	Standards
Generator Sizing	`generator_sizing`, `fuel_storage`, `demand_response`	NEC, NFPA 110, NFPA 30
NFPA 110 Compliance	`nfpa_110_checker`	NFPA 110 Level 1 & Level 2
UPS / ATS Sizing	`ups_sizing`, `ats_sizing`, `battery_storage`	IEEE 485, IEEE 1184, NEC 700/701/702
PUE & Efficiency	`pue_calculator`, `economizer_analysis`	ASHRAE TC 9.9
Cooling Load	`cooling_load`, `chiller_sizing`, `crac_vs_crah`, `airflow_modeling`, `humidification`	ASHRAE
ROI / TCO	`roi_calculator`, `tco_analyzer`, `construction_cost`, `incentive_finder`	—
Tier Certification	`tier_certification`, `redundancy_validator`, `compliance_checker`	Uptime Institute Tier I-IV
Utility Interconnect	`utility_interconnect`, `nc_utility_interconnect`, `energy_procurement`	Utility-specific
Network Design	`network_topology`, `bandwidth_sizing`, `bgp_peering`, `dns_architecture`, `ip_addressing`, `fiber_connectivity`, `latency_calculator`	—
Physical Security	`physical_security`, `biometric_design`, `surveillance_coverage`, `cybersecurity_controls`	NIST CSF, SOC 2, ISO 27001
Site & Construction	`site_scoring`, `construction_timeline`, `permit_timeline`, `environmental_impact`, `water_availability`, `noise_compliance`	NEPA, local codes
Sustainability	`carbon_footprint`, `solar_feasibility`, `energy_procurement`	GHG Protocol, IRA
Operations	`sla_calculator`, `capacity_planning`, `maintenance_schedule`, `change_management`, `commissioning_plan`	NFPA, OEM specs

Compound Chains (8)

Chains run multiple agents sequentially and return a combined result:

Chain	Pipeline
`chain_full_power_analysis`	Generator > NFPA 110 > UPS > ROI
`chain_emergency_power_package`	UPS > ATS > Generator > Fuel Storage > NFPA 110
`chain_site_readiness`	Site Scoring > Tier Cert > Utility Interconnect > Compliance
`chain_full_site_analysis`	Site Scoring > Tier Cert > Utility > Permits > Cost > Timeline
`chain_tco_deep_dive`	PUE > Cooling Load > TCO Analyzer
`chain_cooling_optimization`	Cooling > Chiller > CRAC vs CRAH > Airflow > Economizer
`chain_nc_power_package`	NC Utility Interconnect > Generator > NFPA 110 > UPS
`chain_sustainability_package`	Carbon > Solar > Battery > Energy Procurement > Environmental

Supported Protocols

Security Orchestra exposes every tool across six agent-communication protocols:

Protocol	Status	Endpoint	Use Case
MCP (Model Context Protocol)	Live	SSE: `/sse`, stdio via npx	Claude Desktop, Claude Code, Cursor, any MCP client
A2A (Agent2Agent)	Live	`/.well-known/agent.json`, `/a2a`	Google agent-to-agent discovery and task delegation
OpenAI Agents SDK	Live	`POST /openai/run`	OpenAI-compatible tool-call format
AG-UI	Live	`POST /agui`	CopilotKit streaming agent UI
ACP (Agent Communication Protocol)	Live	`POST /acp/runs`	IBM BeeAI agent communication
AGNTCY / OASF	Live	Per-agent ACP endpoints + OASF manifests	Cisco AGNTCY interoperability

Live Endpoints

	URL
MCP (SSE)	`https://security-orchestra-orchestrator.onrender.com`
Agent Card (A2A)	`https://security-orchestra-orchestrator.onrender.com/.well-known/agent.json`
A2A Tasks	`https://security-orchestra-orchestrator.onrender.com/a2a`
Health	`https://security-orchestra-orchestrator.onrender.com/health`
Landing Page	security-orchestra-landing
Smithery	smithery.ai/@RobotFleet-HQ/security-orchestra

Response Contract

Every tool call returns a CanonicalResponse — same shape regardless of protocol:

jsonc

{
  "agent_id":          "generator_sizing",
  "agent_version":     "1.0",
  "protocol_version":  "1.0",
  "execution_context": "deterministic_calc",

  "status": "success",
  "result": { /* structured data */ },

  "data_freshness": {
    "validated_at":  "2026-03-28",
    "standards_ref": ["NFPA 110:2022"],
    "stale_risk":    "medium"
  },

  "a2a": {
    "task_id":           "uuid-v4",
    "input_tokens_used": 0,
    "credits_consumed":  5,
    "callable_by": ["google-a2a", "openai-agents", "ag-ui", "acp", "agntcy"]
  }
}

Latency

All 50+ individual agents are deterministic TypeScript calculations — no LLM calls, no external I/O.

Context	Description	Latency
`deterministic_calc`	All 50+ individual agents	< 100 ms
`multi_agent_chain`	All 8 compound chains	0.5-5 s
`cached`	Cached result	< 10 ms

All 50+ Agents

Power & Electrical

Agent	What it does
`generator_sizing`	Size generators for data center loads with NEC/NFPA compliance
`ups_sizing`	Size UPS systems per IEEE 485/1184 — VRLA or Li-ion, N/N+1/2N configs
`ats_sizing`	Size automatic transfer switches per NEC 700/701/702
`fuel_storage`	Design diesel fuel storage per NFPA 30 — tanks, containment, SPCC
`nfpa_110_checker`	Validate emergency generator compliance per NFPA 110
`harmonic_analysis`	Analyze THD in power distribution per IEEE 519
`voltage_drop`	Calculate voltage drop per NEC 210.19
`power_density`	Analyze rack power density and PDU sizing per NEC 645
`battery_storage`	Design BESS for backup, peak shaving, demand response
`demand_response`	Model utility demand response program participation

Cooling & Mechanical

Agent	What it does
`cooling_load`	Calculate cooling load per ASHRAE TC 9.9
`pue_calculator`	Calculate PUE with optimization recommendations
`chiller_sizing`	Size water-cooled and air-cooled chillers
`crac_vs_crah`	Compare CRAC vs CRAH — cost, efficiency, constraints
`airflow_modeling`	Model hot/cold aisle containment and CFM requirements
`economizer_analysis`	Analyze free-cooling potential by climate zone
`humidification`	Design humidification systems per ASHRAE A1 envelope

Network & Connectivity

Agent	What it does
`network_topology`	Design spine-leaf network topology
`bandwidth_sizing`	Size north-south and east-west bandwidth
`dns_architecture`	Design DNS — authoritative, recursive, anycast, DNSSEC
`ip_addressing`	Plan IP addressing and VLAN architecture
`bgp_peering`	Design BGP peering and route reflector architecture
`fiber_connectivity`	Analyze fiber routes and carrier diversity
`latency_calculator`	Calculate propagation latency by medium and hop count

Site & Construction

Agent	What it does
`site_scoring`	Score candidate sites across power, connectivity, risk, cost
`construction_cost`	Estimate $/MW construction costs with regional factors
`construction_timeline`	Phase-by-phase schedule with regulatory modifiers
`permit_timeline`	Model permitting timelines across jurisdictions
`environmental_impact`	Assess NOx/PM2.5/CO2 emissions per EPA AP-42
`water_availability`	Assess water supply, stress risk, and recycled water options
`noise_compliance`	Analyze generator noise vs local ordinances
`incentive_finder`	Find federal/state incentives, IRA credits, utility rebates

Utility & Interconnect

Agent	What it does
`utility_interconnect`	Analyze utility interconnect for 9 major US utilities
`nc_utility_interconnect`	North Carolina-specific utility interconnect analysis
`energy_procurement`	Evaluate PPA, direct access, and retail energy strategies
`solar_feasibility`	Analyze on-site solar PV — capacity, IRA credits, payback
`carbon_footprint`	Calculate Scope 1/2/3 emissions per GHG Protocol

Compliance & Certification

Agent	What it does
`redundancy_validator`	Validate against Uptime Institute Tier I-IV standards
`tier_certification`	Assess tier certification readiness with gap analysis
`compliance_checker`	Check SOC 2, ISO 27001, NIST CSF, PCI DSS, FedRAMP

Physical Security

Agent	What it does
`physical_security`	Design layered physical security per Uptime tier standards
`biometric_design`	Design biometric access control — FAR/FRR, throughput
`surveillance_coverage`	Calculate CCTV coverage, storage, and retention
`cybersecurity_controls`	Map controls to NIST CSF and CIS benchmarks

Financial & Operations

Agent	What it does
`roi_calculator`	Calculate NPV, IRR, payback using DCF analysis
`tco_analyzer`	Analyze total cost of ownership over facility life
`sla_calculator`	Model SLA availability against tier benchmarks
`capacity_planning`	Forecast capacity runway and expansion triggers
`maintenance_schedule`	Build annual PM schedules per NFPA and OEM specs
`change_management`	Design change management process per tier class
`commissioning_plan`	Generate commissioning plans per ASHRAE Guideline 1.2
`fire_suppression`	Design clean agent fire suppression per NFPA 2001/75

Architecture

code

+------------------------------------------------------+
|  MCP Client (Claude Desktop / Claude Code / Cursor)  |
+-------------------------+----------------------------+
                          | SSE (MCP protocol)
                          v
+------------------------------------------------------+
|  orchestrator/  (Node.js on Render)                  |
|                                                      |
|  Auth > Rate Limit > Validation > Credit Gate > Run  |
|                                                      |
|  50+ agents & 8 chains                    |
|  Protocols: MCP, A2A, OpenAI, AG-UI, ACP, AGNTCY   |
+----------+----------------------------+--------------+
           | HTTP (credit check/deduct) | write
           v                            v
+--------------------+       +--------------------+
|  billing-api/      |       |  audit.db          |
|  (Express HTTP)    |       |  (SQLite)          |
|  Stripe webhooks   |       +--------------------+
+--------------------+

Pricing

Tier	Monthly	Credits	Rate Limit
Free	$0	100	10/min
Starter	$29	500	60/min
Pro	$99	2,000	300/min
Enterprise	$499	10,000	1,000/min

Get a free API key: Sign up

Self-Hosting

Prerequisites

Node.js 18+
npm 9+

Install & Run

bash

git clone https://github.com/RobotFleet-HQ/security-orchestra
cd security-orchestra

# Build
cd orchestrator && npm install && npm run build && cd ..
cd billing-api  && npm install && npm run build && cd ..

# Configure
cd orchestrator && cp .env.example .env
npm run generate-key myuser free   # generates sk_live_... key

# Run
cd orchestrator && npm start       # Terminal 1
cd billing-api  && npm start       # Terminal 2

Connect Claude Desktop (self-hosted)

json

{
  "mcpServers": {
    "security-orchestra": {
      "command": "node",
      "args": ["/path/to/security-orchestra/orchestrator/dist/index.js"],
      "env": {
        "ORCHESTRATOR_API_KEY": "sk_live_your_key",
        "BILLING_API_URL": "http://localhost:3001"
      }
    }
  }
}

Repository Structure

code

security-orchestra/
├── orchestrator/              # MCP server — 50+ agents & 8 chains
│   └── src/
│       ├── index.ts           # Entry point, tool registry
│       ├── auth.ts            # API key auth
│       ├── rateLimit.ts       # Sliding-window rate limiter
│       ├── validation.ts      # Input sanitization
│       ├── billing.ts         # Credit check/deduct
│       ├── canonical.ts       # CanonicalResponse shape
│       └── audit.ts           # Audit log
├── billing-api/               # HTTP API — users, credits, Stripe
├── [agent]-agent/             # 50+ individual agent modules
├── smithery.yaml              # Smithery registry config
├── mcp.json                   # MCP registry manifest
└── LICENSE                    # MIT

Security

API key authentication on all tool calls
Input validation and sanitization on every request
Sliding-window rate limiting per key and tier
Audit logging of all tool invocations
No LLM calls in individual agents — deterministic calculations only
Credit-gated access prevents abuse

License

MIT — RobotFleet HQ

Install

Configuration

Environment variables

SECURITY_ORCHESTRA_API_KEYrequiredsecret

API key from security-orchestra-landing

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "security-orchestra": {
      "command": "npx",
      "args": [
        "-y",
        "@securityorchestra/security-orchestra@1.0.3"
      ],
      "env": {
        "SECURITY_ORCHESTRA_API_KEY": "<YOUR_SECURITY_ORCHESTRA_API_KEY>"
      }
    }
  }
}

io.github.RobotFleet-HQ/security-orchestra MCP Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Security Orchestra

Installation

Claude Desktop (hosted)

Claude Code (CLI)

npx (Smithery)

What It Does

Tool Categories

Compound Chains (8)

Supported Protocols

Live Endpoints

Response Contract

Latency

All 50+ Agents

Power & Electrical

Cooling & Mechanical

Network & Connectivity

Site & Construction

Utility & Interconnect

Compliance & Certification

Physical Security

Financial & Operations

Architecture

Pricing

Self-Hosting

Prerequisites

Install & Run

Connect Claude Desktop (self-hosted)

Repository Structure

Security

License

Install

Configuration

Related servers