Machine access

For AI agents

Machine-readable access to the Security Startups catalog. Prefer HTTP search when you do not need stdio MCP.

OpenAPI

Machine-readable spec for the public catalog: /openapi.json. Search and dump only. No auth. Versioned aliases live at /api/v1/search and /api/v1/startups.json.

Catalog search API

GET https://securitystartups.com/api/search?category=application-security&q=authz
GET https://securitystartups.com/api/search?funding_stage=Series%20A&limit=20
GET https://securitystartups.com/api/search?category=ai-security&limit=100

Params: category, funding_stage (repeatable, comma-separable), q, limit (default 50; if present, must be an integer from 1 to 100, else HTTP 400 JSON). Category values are listed in /api/startups.json. Also at GET /api/v1/search.

Response fields: total (matches before limit), count (results returned this page), limit (applied cap), normalized, results. Prefer total for catalog size under a filter; unfiltered full size is also on the dump below.

Full dump

GET https://securitystartups.com/api/startups.json

Shape: count, categoryCount, categories, startups (full public fields, alphabetical by name), dataAsOf (latest catalog date_added), lastUpdated (response date).

llms.txt

/llms.txt (index: categories, shortlists, machine endpoints, counts) and /llms-full.txt (full catalog text, same company count as the JSON dump).

Human shortlists (alphabetical within category, not ranked): /best.

MCP server

npx -y @security-startups/mcp-server
# tools: search_startups, get_startup, check_if_listed, list_categories, submit_company

Source: mcp-server/ in the repo. After npm publish of @security-startups/mcp-server, npx works zero-install. Until then: node mcp-server/dist/index.js from a clone, or use HTTP POST /api/submit below.

Submit a company

Humans: /submit. Agents (free review queue only):

POST https://securitystartups.com/api/submit
Content-Type: application/json

{
  "name": "My Security Company",
  "url": "https://example.com",
  "brief_summary": "What the company builds (20+ chars).",
  "email": "you@example.com",
  "category": "application-security"
}

Free tier queues up to ~90 days for review. MCP tool submit_company calls the same API.