@blacksandscyber/mcp-server-bursar 0.5.0

package/build/index.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * @blacksandscyber/mcp-server-bursar
+ *
+ * Blacksands Bursar MCP Server.
+ * 39 tools exposing the human-admin surface via the Blacksands Broker.
+ *
+ * Usage:
+ *   node build/index.js                 # Start via stdio transport
+ *   npx -y @blacksandscyber/mcp-server-bursar  # Run via npx
+ *
+ * Credentials are issued by a human administrator through Overwatch or
+ * SysAdmin and provided here as configuration. See README.md for details.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const server_1 = require("./server");
+const logger_1 = require("./shared/logger");
+async function main() {
+    logger_1.logger.info("Starting Blacksands Bursar MCP Server v0.2.0 (broker-only)");
+    const server = (0, server_1.createServer)();
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    logger_1.logger.info("MCP Server connected via stdio transport — ready for tool calls");
+}
+main().catch((err) => {
+    logger_1.logger.error("Fatal: MCP Server failed to start", { error: err.message, stack: err.stack });
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/build/server.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Blacksands Bursar MCP Server — 52 tools across 8 categories.
+ *
+ * The Shield MCP Server exposes the same operational surface a human
+ * administrator reaches through Overwatch or SysAdmin. Every call is
+ * authenticated and proxied through the full Broker handshake — there is
+ * no direct Shield API access, no API-key bootstrap, and no internal
+ * system access (Kafka, LDAP, AWS SDK, iptables, Route 53 are all internal
+ * to Blacksands and never touched by the Agent).
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ClaimSummaryInput } from "./shared/linkBuilder";
+/**
+ * Build the ANONYMIZED claim summary for a free local scan. Deliberately
+ * contains NO paths, hostnames, snippets, or service names — the Shield API
+ * rejects payloads that fail its anonymization schema, so we only ever send
+ * derived counts/severities and generic finding titles.
+ */
+export declare function buildAnonymizedScanSummary(scan: {
+    bySeverity?: Record<string, number>;
+    highestSeverity?: string;
+    framework?: {
+        name?: string;
+        language?: string;
+        packageManager?: string;
+    };
+    endpoints?: Array<{
+        method?: string;
+        auth_method?: string;
+        severity?: string;
+    }>;
+    piiFields?: Array<{
+        type?: string;
+        severity?: string;
+        sensitivity?: string;
+    }>;
+    externalServices?: unknown[];
+    dataStores?: unknown[];
+}): ClaimSummaryInput;
+export declare function createServer(): McpServer;
+//# sourceMappingURL=server.d.ts.map