@aaa-sentinel/mcp-server 0.9.0 → 0.10.0

package/README.md

@@ -117,6 +117,9 @@ status as plain JSON.
 | `get_security_posture_history` | `accountId` or `clientId`, `days?` | `security:read` | Pro + risk and compliance add-on |
 | `get_account` | `accountId` | `accounts:read` | Pro |
 | `get_account_monthly_costs` | `accountId` | `accounts:read` | Pro |
+| `list_architecture_apps` | `accountId`, `limit?`, `cursor?` | `accounts:read` | Pro |
+| `get_architecture_app` | `accountId`, `appId`, `limit?`, `cursor?` | `accounts:read` | Pro |
+| `get_architecture_graph` | `accountId`, `app?` | `accounts:read` | Pro |
 | `get_cost_history` | `accountId` | `reports:read` | Pro |
 | `get_cost_by_tags` | `accountId` | `reports:read` | Pro |
 | `get_multicloud_report` | — | `reports:read` | Pro |

package/dist/cli.js

@@ -6330,6 +6330,54 @@ var TOOLS = [
     argsSchema: object({ accountId: string2().min(1) }),
     handler: async ({ accountId }, config2) => apiGet(`/v1/accounts/${encodeURIComponent(accountId)}/monthly-costs`, void 0, config2)
   }),
+  // ── Mapa de arquitectura ───────────────────────────────────
+  defineTool({
+    name: "list_architecture_apps",
+    description: 'List the applications of one cloud account in the architecture map (AWS today; other providers return supported false), most expensive first. Each application comes from a tag (source "tag"), a CloudFormation stack ("stack"), a manual grouping ("manual") or a suggestion not yet confirmed ("suggested"), with its component count, regions, monthlyUsd (sum of priced components, null when none has a price), cost findings and their savingsUsd, and tag coverage. unassigned summarizes components with no application. Amounts: fields ending in Usd are monthly estimates in USD; the sibling without the suffix (monthly, savings) is the same amount in the organization currency (currency.code, approximate). snapshot says which map version this is (builtAt) and what could not be read. Configuration metadata only, never traffic or contents. Paginated: pass nextCursor as cursor; a cursor from before the map changed is rejected and you start again. Requires the accounts:read scope.',
+    inputSchema: objectWith(
+      {
+        accountId: ACCOUNT_ID,
+        limit: { type: "integer", minimum: 1, maximum: 500, description: "Page size (1-500, default 100)." },
+        cursor: CURSOR
+      },
+      ["accountId"]
+    ),
+    argsSchema: object({ accountId: string2().min(1), limit: number2().int().min(1).max(500).optional(), cursor: string2().min(1).optional() }),
+    handler: async ({ accountId, limit, cursor }, config2) => apiGet(`/v1/architecture/accounts/${encodeURIComponent(accountId)}/apps`, { limit: asText(limit), cursor }, config2)
+  }),
+  defineTool({
+    name: "get_architecture_app",
+    description: 'Get one application of the architecture map with its components, most expensive first: type, region, customer tags, monthlyUsd (null means no known price), cost findings and savingsUsd, whether it is reachable from the internet (exposed) and how it was assigned (assignedBy: tag, manual, stack, suggested or none). Amounts: fields ending in Usd are monthly estimates in USD; the sibling without the suffix (monthly, savings) is the same amount in the organization currency (currency.code, approximate). Use appId "unassigned" for components with no application. Paginated like list_architecture_apps. Requires the accounts:read scope.',
+    inputSchema: objectWith(
+      {
+        accountId: ACCOUNT_ID,
+        appId: { type: "string", description: 'Application identifier, as returned by list_architecture_apps, or "unassigned".' },
+        limit: { type: "integer", minimum: 1, maximum: 1e3, description: "Page size (1-1000, default 200)." },
+        cursor: CURSOR
+      },
+      ["accountId", "appId"]
+    ),
+    argsSchema: object({
+      accountId: string2().min(1),
+      appId: string2().min(1),
+      limit: number2().int().min(1).max(1e3).optional(),
+      cursor: string2().min(1).optional()
+    }),
+    handler: async ({ accountId, appId, limit, cursor }, config2) => apiGet(`/v1/architecture/accounts/${encodeURIComponent(accountId)}/apps/${encodeURIComponent(appId)}`, { limit: asText(limit), cursor }, config2)
+  }),
+  defineTool({
+    name: "get_architecture_graph",
+    description: 'Get how things connect in the architecture map. Without app: one card per application and the links between applications (counts of configured, allowed and resilience connections), plus the internet and outside accounts they talk to. With app: its components (nodes), the edges that touch them, the endpoints outside the application and the network containers (region, VPC, subnet). Every edge says where it comes from: kind "configured" (configuration links A to B) or "allowed" (a network rule permits it), its relation (invokes, routes_to, subscribes, network_allows...) and proof (the provider API call and identifier that show it); never observed traffic, so do not describe edges as traffic. Bounded to 1,500 components and 4,000 edges per application (truncated says so); a large application can return several megabytes, so call it with app only when you need the connections, and use get_architecture_app (paginated) to list components. Amounts: fields ending in Usd are monthly estimates in USD; the sibling without the suffix (monthly, savings) is the same amount in the organization currency (currency.code, approximate). Requires the accounts:read scope and the Pro or Business plan.',
+    inputSchema: objectWith(
+      {
+        accountId: ACCOUNT_ID,
+        app: { type: "string", description: 'Application identifier from list_architecture_apps, or "unassigned" (optional; without it, the account level).' }
+      },
+      ["accountId"]
+    ),
+    argsSchema: object({ accountId: string2().min(1), app: string2().min(1).optional() }),
+    handler: async ({ accountId, app }, config2) => apiGet(`/v1/architecture/accounts/${encodeURIComponent(accountId)}/graph`, { app }, config2)
+  }),
   defineTool({
     name: "get_cost_history",
     description: "Get the spend history of one cloud account for the last 12 months. Requires the reports:read scope and the Pro plan or above.",
@@ -6651,7 +6699,7 @@ function findTool(name) {
 
 // src/protocol.ts
 var SERVER_NAME = "aaa-sentinel-mcp";
-var SERVER_VERSION = "0.9.0";
+var SERVER_VERSION = "0.10.0";
 var SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
 var PARSE_ERROR = -32700;
 var INVALID_REQUEST = -32600;

package/package.json

@@ -1,45 +1,45 @@
-{
-  "name": "@aaa-sentinel/mcp-server",
-  "version": "0.9.0",
-  "description": "Read-only MCP server for AAA Sentinel: query cloud costs, savings, security posture, AI spend, uptime monitoring, the remediation agent and managed clients from an AI assistant",
-  "license": "MIT",
-  "type": "module",
-  "bin": {
-    "aaa-sentinel-mcp": "dist/cli.js"
-  },
-  "files": [
-    "dist"
-  ],
-  "keywords": [
-    "mcp",
-    "modelcontextprotocol",
-    "finops",
-    "cost",
-    "monitoring",
-    "uptime",
-    "security",
-    "ai-spend"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "homepage": "https://app.aaa-sentinel.com/developer/docs#mcp",
-  "bugs": {
-    "url": "https://app.aaa-sentinel.com/contact"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "build": "esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/cli.js",
-    "prepublishOnly": "npm run build",
-    "test": "vitest run"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "esbuild": "^0.24.0",
-    "typescript": "^5.7.0",
-    "vitest": "^3.2.0",
-    "zod": "^4.6.7"
-  }
-}
+{
+  "name": "@aaa-sentinel/mcp-server",
+  "version": "0.10.0",
+  "description": "Read-only MCP server for AAA Sentinel: query cloud costs, savings, security posture, AI spend, uptime monitoring, the remediation agent and managed clients from an AI assistant",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "aaa-sentinel-mcp": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "mcp",
+    "modelcontextprotocol",
+    "finops",
+    "cost",
+    "monitoring",
+    "uptime",
+    "security",
+    "ai-spend"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://app.aaa-sentinel.com/developer/docs#mcp",
+  "bugs": {
+    "url": "https://app.aaa-sentinel.com/contact"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/cli.js",
+    "prepublishOnly": "npm run build",
+    "test": "vitest run"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "esbuild": "^0.24.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.2.0",
+    "zod": "^4.6.7"
+  }
+}