augure-mcp 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 766c5afcc703993f7c40d24808548eb68a5b6363b760897f11f08d638d4bcfd2
+  data.tar.gz: 4b6729a546f1620195c5cd2e580294df242a2796168bfea803f09f46c00c5ee0
+SHA512:
+  metadata.gz: 744c4a03191801f48e5f054b8d8c3ffc86f9f2b071e20ee3ca6d30bd773d68266b5dc5c4a2400a2f961c87ed30af475b07c6f9470c941c01c43afbad50fdc5bc
+  data.tar.gz: c9506146189ad12ee6de26ac65d2a302f8a4ea103630af91d43f72410461d08e8c265544fa14f330ac4fa2de4d30b0c6fd132eed9a90aad03cea3298db858cff

data/exe/augure-mcp

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require "augure-mcp"
+
+transport = MCP::Server::Transports::StdioTransport.new(AugureMcp::Server.build)
+transport.open

data/home/runner/work/augure/augure/mcp_server/exe/augure-mcp

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require "augure-mcp"
+
+transport = MCP::Server::Transports::StdioTransport.new(AugureMcp::Server.build)
+transport.open

data/home/runner/work/augure/augure/mcp_server/lib/augure-mcp/server.rb

@@ -0,0 +1,91 @@
+# frozen_string_literal: true
+
+require "mcp"
+require "augure"
+
+module AugureMcp
+  # The MCP surface of the decision layer: READ-ONLY by design. The server
+  # executes nothing - it is the SDK boundary. An LLM that asks "which
+  # technique?" gets a verified, explained decision instead of a guess.
+  class Server
+    TOOLS = [
+      AnalyzeTarget = Class.new(MCP::Tool) do
+        description "Analyze an augure fact file (or raw facts) and return the " \
+                    "auditable decision: applicable techniques, verified checks, " \
+                    "deterministic ranking, seeded selection, plan and the full " \
+                    "provenance (rule IDs + evidence). Read-only; executes nothing."
+        input_schema(
+          properties: {
+            facts: {type: "string", description: "Raw facts text (predicate lines)"},
+            facts_file: {type: "string", description: "Path to a .facts file"},
+            seed: {type: "integer", description: "Optional seed for reproducible draws"}
+          }
+        )
+
+        class << self
+          def call(facts: nil, facts_file: nil, seed: nil, server_context: nil)
+            text = facts || (facts_file && File.read(facts_file))
+            return MCP::Tool::Response.new([{type: "text", text: "error: provide facts or facts_file"}]) unless text
+
+            result = ::Augure::Pipeline.analyze(facts: text, seed: seed ? Integer(seed) : nil)
+            MCP::Tool::Response.new([{type: "text", text: JSON.pretty_generate(
+              applicable: result[:applicable],
+              verified: result[:verified],
+              ranking: result[:ranking],
+              selected: result[:selected],
+              plan: result[:plan],
+              explain: result[:explain]
+            )}])
+          rescue ::Augure::MalformedFact, ::Augure::UnknownPredicate => e
+            MCP::Tool::Response.new([{type: "text", text: "error: #{e.message}"}])
+          end
+        end
+      end,
+
+      ListRules = Class.new(MCP::Tool) do
+        description "List the augure rules-as-data table: rule IDs, heads and " \
+                    "documented sources. The single source of truth for " \
+                    "technique applicability."
+        input_schema(properties: {})
+
+        class << self
+          def call(server_context: nil)
+            rows = ::Augure::Rules.all.map do |rule|
+              {id: rule.id, head: rule.head.join("="), source: rule.source}
+            end
+            MCP::Tool::Response.new([{type: "text", text: JSON.pretty_generate(rules: rows)}])
+          end
+        end
+      end,
+
+      ExplainTechnique = Class.new(MCP::Tool) do
+        description "Explain one technique: its rule conditions and documented " \
+                    "knowledge-base entry (pattern, chain, unlocks, success rate)."
+        input_schema(
+          properties: {technique: {type: "string"}},
+          required: ["technique"]
+        )
+
+        class << self
+          def call(technique:, server_context: nil)
+            rules = ::Augure::Rules.all.select { |r| r.head == [::Augure::Rules::APPLICABLE, technique] }
+            entries = ::Augure::KnowledgeBase.corpus.select { |e| e["technique"] == technique }
+            MCP::Tool::Response.new([{type: "text", text: JSON.pretty_generate(
+              technique: technique,
+              rules: rules.map { |r| {id: r.id, source: r.source} },
+              knowledge: entries
+            )}])
+          end
+        end
+      end
+    ].freeze
+
+    def self.build
+      ::MCP::Server.new(name: "augure-mcp", version: "0.1.0", tools: TOOLS).tap do |server|
+        server.instructions = "augure is an auditable exploitation decision layer. " \
+                              "Use analyze_target on fact files; every answer ships " \
+                              "its rule provenance. Augure decides, it never executes."
+      end
+    end
+  end
+end

data/home/runner/work/augure/augure/mcp_server/lib/augure-mcp/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module AugureMcp
+  VERSION = "0.1.0"
+end

data/home/runner/work/augure/augure/mcp_server/lib/augure-mcp.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require "mcp"
+require_relative "augure-mcp/version"
+require_relative "augure-mcp/server"
+
+module AugureMcp
+end

metadata

@@ -0,0 +1,78 @@
+--- !ruby/object:Gem::Specification
+name: augure-mcp
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Gregory Epp
+bindir: exe
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: augure
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: mcp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+description: 'Three read-only tools: analyze_target (facts in, decision + provenance
+  out), list_rules, explain_technique. The LLM proposes, augure disposes - the decision
+  layer every security agent can call.'
+email:
+- log0u7@users.noreply.github.com
+executables:
+- augure-mcp
+extensions: []
+extra_rdoc_files: []
+files:
+- "/home/runner/work/augure/augure/mcp_server/exe/augure-mcp"
+- "/home/runner/work/augure/augure/mcp_server/lib/augure-mcp.rb"
+- "/home/runner/work/augure/augure/mcp_server/lib/augure-mcp/server.rb"
+- "/home/runner/work/augure/augure/mcp_server/lib/augure-mcp/version.rb"
+- exe/augure-mcp
+homepage: https://github.com/log0u7/augure
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/log0u7/augure
+  source_code_uri: https://github.com/log0u7/augure
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.4'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: Read-only MCP server exposing the augure decision layer to LLM agents.
+test_files: []