@guardbee/mcp-server-auditor 0.1.0

package/README.md

@@ -0,0 +1,108 @@
+# @guardbee/mcp-server-auditor
+
+MCP (Model Context Protocol) sunucusu — **başka MCP server'ların** tool tanımlarını güvensiz kalıplar için tarar.
+
+`ai-code-scanner` genel LLM/AI entegrasyon koduna bakarken, bu paket özellikle bir MCP server'ın kendisine bakar: `server.tool(...)` ile tanımlanan bir tool ne kadar yetkili, parametreleri ne kadar gevşek, handler'ı hangi tehlikeli sink'lere (shell/dosya sistemi/HTTP/SQL) doğrudan tool girdisi geçiriyor. MCP ekosistemi hızla büyüyor ama bu server'ların güvenlik denetimi için yaygın bir araç henüz yok.
+
+> Bu paket varsayılan olarak kullanım telemetrisi gönderir (tool adı + kısa parametreler, taranan kod hiçbir zaman dahil değil — bkz. [`@guardbee/mcp-telemetry`](../telemetry/README.md)). Kapatmak için `GUARDBEE_TELEMETRY=0`.
+
+```
+Claude ──► mcp-server-auditor ──► Bir MCP server'ın kaynak kodu
+              │
+              ├─ Excessive agency    (execSync(input.command), "run_shell" adlı bir tool)
+              ├─ Unsafe input        (fetch(input.url) → SSRF, SQL string interpolation)
+              ├─ Loose schema        (bir parametre z.any()/z.unknown() tipinde)
+              ├─ Secrets exposure    (şema default'unda sabit API key, process.env'in tamamı)
+              └─ Network exposure    (wildcard CORS)
+```
+
+---
+
+## Özellikler
+
+- **10 kalıp, 5 kategori** — excessive-agency, unsafe-input, loose-schema, secrets-exposure, network-exposure
+- Her bulguda **neden riskli olduğu ve ne yapılması gerektiği** (`recommendation`) — sadece "bulundu" demez
+- SARIF 2.1.0 çıktısı — CI/CD entegrasyonu (GitHub Code Scanning vb.)
+- `guardbee.yml` ile config dosyası desteği
+- 32 unit test — her kalıp için hem pozitif hem negatif (yanlış-pozitif) senaryo
+
+---
+
+## Hızlı Başlangıç
+
+### Claude Desktop / MCP Client
+
+```json
+{
+  "mcpServers": {
+    "guardbee-mcp-server-auditor": {
+      "command": "npx",
+      "args": ["-y", "@guardbee/mcp-server-auditor"]
+    }
+  }
+}
+```
+
+### CLI (CI/CD)
+
+```bash
+npx @guardbee/mcp-server-auditor scan ./src --fail-on=high --format=sarif > results.sarif
+```
+
+---
+
+## MCP Tools
+
+| Tool | Açıklama |
+|------|----------|
+| `scan_text` | Verilen bir metin/kod parçasını tarar |
+| `scan_file` | Tek bir dosyayı tarar |
+| `scan_directory` | Bir dizini recursive tarar (`node_modules`, `.git`, `dist` otomatik atlanır) |
+| `list_patterns` | Desteklenen tüm kalıpları kategoriye göre listeler |
+
+---
+
+## Tespit Edilen Kalıplar
+
+| Kategori | Kalıp | Önem | Ne demek |
+|---|---|---|---|
+| excessive-agency | `shell_exec_from_tool_input` | critical | Tool handler'ı, tool girdisini doğrudan `execSync`/`spawn` gibi bir shell çağrısına geçiriyor |
+| excessive-agency | `eval_of_tool_input` | critical | Tool girdisi `eval()`/`new Function()` ile kod olarak çalıştırılıyor |
+| excessive-agency | `unrestricted_shell_tool_name` | high | Tool adı (`run_shell`, `execute_sql` vb.) doğrudan shell/SQL çalıştırma yetkisi ima ediyor |
+| unsafe-input | `fs_write_from_raw_tool_input` | high | Tool girdisindeki bir path, doğrulama olmadan dosya yazma/silme çağrısına geçiyor (path traversal) |
+| unsafe-input | `ssrf_fetch_from_tool_input` | high | Tool girdisindeki bir URL, allowlist olmadan doğrudan `fetch`/`axios`'a geçiyor (SSRF) |
+| unsafe-input | `sql_injection_via_tool_input` | critical | Tool girdisi bir SQL string'ine template-literal ile enjekte ediliyor |
+| loose-schema | `overly_permissive_tool_schema` | medium | Bir tool parametresi `z.any()`/`z.unknown()` tipinde — her şeyi kabul ediyor |
+| secrets-exposure | `hardcoded_secret_in_tool_schema` | critical | Credential-benzeri bir şema alanının default değeri sabit bir literal |
+| secrets-exposure | `full_env_exposed_to_tool_caller` | critical | `process.env`'in tamamı spread/stringify/return ediliyor (tek bir named değişken değil) |
+| network-exposure | `permissive_cors_on_server` | medium | Wildcard CORS (`Access-Control-Allow-Origin: *`) ya da opsiyonsuz `cors()` |
+
+Bunlar **heuristic** bulgulardır — tam bir AST/tip analizi değil, statik metin kalıbı taraması yapar. Düşük yanlış-pozitif oranı için tasarlandı ama her bulgu yine de manuel gözden geçirilmelidir.
+
+---
+
+## Yapılandırma (`guardbee.yml`)
+
+```yaml
+mcp-server-auditor:
+  fail-on: high       # any | critical | high | medium | low | none
+  max-files: 5000
+  exclude:
+    - "**/*.test.ts"
+    - "fixtures/"
+```
+
+---
+
+## Geliştirme
+
+```bash
+npm run build
+npm test             # 32 unit test
+```
+
+---
+
+## Lisans
+
+MIT — [GuardBee](https://guardbee.ai)

package/dist/__tests__/scanner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scanner.test.d.ts.map

package/dist/__tests__/scanner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/scanner.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/scanner.test.js

@@ -0,0 +1,131 @@
+import { describe, it, expect } from "vitest";
+import { scanText } from "../scanner.js";
+function idsOf(text) {
+    return scanText(text).map((f) => f.patternId);
+}
+describe("scanText — shell_exec_from_tool_input", () => {
+    it("yakalar: execSync(input.command)", () => {
+        expect(idsOf(`const out = execSync(input.command);`)).toContain("shell_exec_from_tool_input");
+    });
+    it("yakalar: spawn(params.cmd)", () => {
+        expect(idsOf(`spawn(params.cmd, params.args);`)).toContain("shell_exec_from_tool_input");
+    });
+    it("sabit bir komut çalıştırmayı yakalamaz", () => {
+        expect(idsOf(`execSync("ls -la /tmp");`)).not.toContain("shell_exec_from_tool_input");
+    });
+});
+describe("scanText — eval_of_tool_input", () => {
+    it("yakalar: eval(input.expression)", () => {
+        expect(idsOf(`const result = eval(input.expression);`)).toContain("eval_of_tool_input");
+    });
+    it("yakalar: new Function(args.code)", () => {
+        expect(idsOf(`const fn = new Function(args.code);`)).toContain("eval_of_tool_input");
+    });
+    it("sabit bir string'i eval etmeyi yakalamaz", () => {
+        expect(idsOf(`const result = eval("1 + 1");`)).not.toContain("eval_of_tool_input");
+    });
+});
+describe("scanText — unrestricted_shell_tool_name", () => {
+    it("yakalar: server.tool(\"run_shell\", ...)", () => {
+        expect(idsOf(`server.tool("run_shell", "runs a shell command", {}, handler);`)).toContain("unrestricted_shell_tool_name");
+    });
+    it("yakalar: .tool('execute_sql', ...)", () => {
+        expect(idsOf(`server.tool('execute_sql', "runs SQL", {}, handler);`)).toContain("unrestricted_shell_tool_name");
+    });
+    it("zararsız bir tool adını yakalamaz", () => {
+        expect(idsOf(`server.tool("query_table", "queries a table", {}, handler);`)).not.toContain("unrestricted_shell_tool_name");
+    });
+});
+describe("scanText — fs_write_from_raw_tool_input", () => {
+    it("yakalar: writeFileSync(input.path, data)", () => {
+        expect(idsOf(`writeFileSync(input.path, data);`)).toContain("fs_write_from_raw_tool_input");
+    });
+    it("yakalar: unlinkSync(params.filePath)", () => {
+        expect(idsOf(`unlinkSync(params.filePath);`)).toContain("fs_write_from_raw_tool_input");
+    });
+    it("sabit bir path'e yazmayı yakalamaz", () => {
+        expect(idsOf(`writeFileSync("./out.log", data);`)).not.toContain("fs_write_from_raw_tool_input");
+    });
+});
+describe("scanText — ssrf_fetch_from_tool_input", () => {
+    it("yakalar: fetch(input.url)", () => {
+        expect(idsOf(`await fetch(input.url);`)).toContain("ssrf_fetch_from_tool_input");
+    });
+    it("yakalar: axios.get(args.target)", () => {
+        expect(idsOf(`await axios.get(args.target);`)).toContain("ssrf_fetch_from_tool_input");
+    });
+    it("sabit bir URL'e fetch'i yakalamaz", () => {
+        expect(idsOf(`await fetch("https://api.guardbee.ai/status");`)).not.toContain("ssrf_fetch_from_tool_input");
+    });
+});
+describe("scanText — sql_injection_via_tool_input", () => {
+    it("yakalar: SELECT ... ${input.id}", () => {
+        const code = "const sql = `SELECT * FROM users WHERE id = ${input.id}`;";
+        expect(idsOf(code)).toContain("sql_injection_via_tool_input");
+    });
+    it("yakalar: DELETE ... ${params.table}", () => {
+        const code = "const sql = `DELETE FROM ${params.table} WHERE id = 1`;";
+        expect(idsOf(code)).toContain("sql_injection_via_tool_input");
+    });
+    it("parametrize edilmiş sorguyu yakalamaz", () => {
+        const code = `const sql = "SELECT * FROM users WHERE id = $1"; db.query(sql, [input.id]);`;
+        expect(idsOf(code)).not.toContain("sql_injection_via_tool_input");
+    });
+});
+describe("scanText — overly_permissive_tool_schema", () => {
+    it("yakalar: server.tool(...) içinde z.any()", () => {
+        const code = `server.tool("update_row", "desc", { data: z.any() }, handler);`;
+        expect(idsOf(code)).toContain("overly_permissive_tool_schema");
+    });
+    it("yakalar: z.unknown()", () => {
+        const code = `server.tool("query_table", "desc", { filter: z.unknown() }, handler);`;
+        expect(idsOf(code)).toContain("overly_permissive_tool_schema");
+    });
+    it("dar bir şemayı yakalamaz", () => {
+        const code = `server.tool("query_table", "desc", { table: z.string() }, handler);`;
+        expect(idsOf(code)).not.toContain("overly_permissive_tool_schema");
+    });
+});
+describe("scanText — hardcoded_secret_in_tool_schema", () => {
+    it("yakalar: apiKey: z.string().default(\"sk-...\")", () => {
+        const code = `const schema = { apiKey: z.string().default("sk-1234567890abcdef") };`;
+        expect(idsOf(code)).toContain("hardcoded_secret_in_tool_schema");
+    });
+    it("varsayılansız bir apiKey alanını yakalamaz", () => {
+        const code = `const schema = { apiKey: z.string() };`;
+        expect(idsOf(code)).not.toContain("hardcoded_secret_in_tool_schema");
+    });
+    it("PII olmayan kısa bir default'u yakalamaz", () => {
+        const code = `const schema = { status: z.string().default("active") };`;
+        expect(idsOf(code)).not.toContain("hardcoded_secret_in_tool_schema");
+    });
+});
+describe("scanText — full_env_exposed_to_tool_caller", () => {
+    it("yakalar: { ...process.env }", () => {
+        expect(idsOf(`return { content: [{ type: "text", text: JSON.stringify({ ...process.env }) }] };`)).toContain("full_env_exposed_to_tool_caller");
+    });
+    it("yakalar: JSON.stringify(process.env)", () => {
+        expect(idsOf(`const dump = JSON.stringify(process.env);`)).toContain("full_env_exposed_to_tool_caller");
+    });
+    it("yakalar: return process.env;", () => {
+        expect(idsOf(`function getEnv() {\n  return process.env;\n}`)).toContain("full_env_exposed_to_tool_caller");
+    });
+    it("tek bir named env var okumasını yakalamaz", () => {
+        expect(idsOf(`const key = process.env.DATABASE_URL;`)).not.toContain("full_env_exposed_to_tool_caller");
+    });
+    it("destructuring ile named var okumasını yakalamaz", () => {
+        expect(idsOf(`const { DATABASE_URL, PORT } = process.env;`)).not.toContain("full_env_exposed_to_tool_caller");
+    });
+});
+describe("scanText — permissive_cors_on_server", () => {
+    it("yakalar: Access-Control-Allow-Origin: '*'", () => {
+        expect(idsOf(`res.setHeader("Access-Control-Allow-Origin", "*");`)).toContain("permissive_cors_on_server");
+    });
+    it("yakalar: cors() (opsiyonsuz)", () => {
+        expect(idsOf(`app.use(cors());`)).toContain("permissive_cors_on_server");
+    });
+    it("kısıtlı bir origin'i yakalamaz", () => {
+        expect(idsOf(`app.use(cors({ origin: "https://guardbee.ai" }));`)).not.toContain("permissive_cors_on_server");
+    });
+});
+//# sourceMappingURL=scanner.test.js.map

package/dist/__tests__/scanner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.test.js","sourceRoot":"","sources":["../../src/__tests__/scanner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAC,SAAS,CACvF,8BAA8B,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC,SAAS,CAC7E,8BAA8B,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACxF,8BAA8B,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAC3E,4BAA4B,CAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,IAAI,GAAG,2DAA2D,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG,yDAAyD,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,6EAA6E,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,gEAAgE,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,uEAAuE,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,qEAAqE,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,uEAAuE,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,wCAAwC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,0DAA0D,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC,CAAC,SAAS,CAC1G,iCAAiC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,SAAS,CACtE,iCAAiC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACxE,iCAAiC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC,SAAS,CAC3E,2BAA2B,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAC9E,2BAA2B,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+import { startServer } from "./server.js";
+import { scanFile, scanDirectory } from "./scanner.js";
+import { buildSarif } from "./sarif.js";
+import { loadConfig, configFilePath } from "./config.js";
+import { statSync, readFileSync } from "fs";
+import { resolve, dirname } from "path";
+import { fileURLToPath } from "url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function getVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(resolve(__dirname, "../package.json"), "utf8"));
+        return pkg.version;
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+const SEV_ICON = {
+    critical: "🔴",
+    high: "🟠",
+    medium: "🟡",
+    low: "🔵",
+};
+function printText(findings, scannedFiles, durationMs) {
+    if (findings.length === 0) {
+        console.log(`✅ No MCP server security issues found in ${scannedFiles} file(s) (${durationMs}ms)`);
+        return;
+    }
+    const counts = {};
+    for (const f of findings)
+        counts[f.severity] = (counts[f.severity] ?? 0) + 1;
+    console.log(`⚠️  Found ${findings.length} MCP server security issue(s) in ${scannedFiles} file(s) (${durationMs}ms)`);
+    console.log(`   Critical: ${counts["critical"] ?? 0}  High: ${counts["high"] ?? 0}  Medium: ${counts["medium"] ?? 0}  Low: ${counts["low"] ?? 0}`);
+    console.log("");
+    for (const f of findings) {
+        const icon = SEV_ICON[f.severity] ?? "⚪";
+        console.log(`${icon} [${f.severity.toUpperCase()}] ${f.patternName} (${f.category})`);
+        if (f.file)
+            console.log(`   File           : ${f.file}:${f.line}:${f.column}`);
+        console.log(`   Match          : ${f.match}`);
+        console.log(`   Recommendation : ${f.recommendation}`);
+        console.log("");
+    }
+}
+function parseArgs(args) {
+    const positionals = [];
+    let failOn = "any";
+    let format = "text";
+    let maxFiles = 5000;
+    for (const arg of args) {
+        if (arg.startsWith("--fail-on="))
+            failOn = arg.split("=")[1] ?? "any";
+        else if (arg.startsWith("--format="))
+            format = arg.split("=")[1] ?? "text";
+        else if (arg.startsWith("--max-files="))
+            maxFiles = parseInt(arg.split("=")[1] ?? "5000", 10);
+        else if (!arg.startsWith("--"))
+            positionals.push(arg);
+    }
+    return { positionals, failOn, format, maxFiles };
+}
+function shouldFail(findings, failOn) {
+    if (failOn === "none")
+        return false;
+    if (failOn === "any")
+        return findings.length > 0;
+    const RANK = { critical: 0, high: 1, medium: 2, low: 3 };
+    const threshold = RANK[failOn] ?? 1;
+    return findings.some((f) => (RANK[f.severity] ?? 3) <= threshold);
+}
+async function runCli(rawArgs) {
+    const { positionals, failOn: cliFail, format, maxFiles: cliMax } = parseArgs(rawArgs);
+    const target = positionals[0];
+    if (!target) {
+        console.error("Usage: guardbee-mcp-server-auditor scan <path> [--fail-on=any] [--format=text|json|sarif]");
+        process.exit(2);
+    }
+    const cfg = loadConfig(target, {
+        ...(cliFail !== "any" ? { failOn: cliFail } : {}),
+        ...(cliMax !== 5000 ? { maxFiles: cliMax } : {}),
+    });
+    const cfgPath = configFilePath(target);
+    if (cfgPath && format === "text")
+        process.stderr.write(`[guardbee] Using config: ${cfgPath}\n`);
+    const { failOn, maxFiles } = cfg;
+    let stat;
+    try {
+        stat = statSync(target);
+    }
+    catch {
+        console.error(`Path not found: ${target}`);
+        process.exit(2);
+    }
+    let findings;
+    let scannedFiles;
+    let durationMs;
+    if (stat.isDirectory()) {
+        const result = scanDirectory(target, { maxFiles, exclude: cfg.exclude });
+        findings = result.findings;
+        scannedFiles = result.scannedFiles;
+        durationMs = result.durationMs;
+    }
+    else {
+        const start = Date.now();
+        const result = scanFile(target);
+        findings = result.findings;
+        scannedFiles = result.skipped ? 0 : 1;
+        durationMs = Date.now() - start;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify({ findings, scannedFiles, durationMs }, null, 2));
+    }
+    else if (format === "sarif") {
+        console.log(JSON.stringify(buildSarif(getVersion(), findings), null, 2));
+    }
+    else {
+        printText(findings, scannedFiles, durationMs);
+    }
+    process.exit(shouldFail(findings, failOn) ? 1 : 0);
+}
+function printHelp() {
+    console.log(`@guardbee/mcp-server-auditor
+
+Usage (MCP server):
+  guardbee-mcp-server-auditor [serve]
+
+Usage (CLI):
+  guardbee-mcp-server-auditor scan <path>    Scan an MCP server's codebase for insecure tool-definition patterns
+
+Options:
+  --fail-on=<level>   Exit 1 if issues at this severity or above are found
+                      Levels: any (default) | critical | high | medium | low | none
+  --format=<fmt>      Output format: text (default) | json | sarif
+  --max-files=<n>     Max files to scan (default: 5000)
+
+Exit codes:
+  0  No issues found (or none above --fail-on threshold)
+  1  Issues found at or above threshold
+  2  Error / bad arguments
+`);
+}
+const [, , firstArg, ...rest] = process.argv;
+if (!firstArg || firstArg === "serve") {
+    startServer().catch((err) => {
+        process.stderr.write(`[guardbee-mcp-server-auditor] Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+else if (firstArg === "--help" || firstArg === "-h") {
+    printHelp();
+    process.exit(0);
+}
+else if (firstArg === "scan") {
+    runCli(rest).catch((err) => {
+        console.error("Error:", err.message);
+        process.exit(2);
+    });
+}
+else {
+    console.error(`Unknown command: ${firstArg}`);
+    console.error("Run with --help for usage.");
+    process.exit(2);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC3G,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,MAAM,QAAQ,GAA2B;IACvC,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;CACV,CAAC;AAEF,SAAS,SAAS,CAAC,QAAmB,EAAE,YAAoB,EAAE,UAAkB;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4CAA4C,YAAY,aAAa,UAAU,KAAK,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,oCAAoC,YAAY,aAAa,UAAU,KAAK,CAAC,CAAC;IACtH,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAM/B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;aACjE,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;aACtE,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;aACzF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB,EAAE,MAAc;IACrD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAiB;IACrC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE;QAC7B,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;IAEhG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IAEjC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAmB,CAAC;IACxB,IAAI,YAAoB,CAAC;IACzB,IAAI,UAAkB,CAAC;IAEvB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACnC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,EAAE,AAAD,EAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IACtC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;IACtD,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+export interface McpServerAuditorConfig {
+    failOn: string;
+    maxFiles: number;
+    exclude: string[];
+}
+export declare function loadConfig(searchDir: string, cliOverrides?: Partial<McpServerAuditorConfig>): McpServerAuditorConfig;
+export declare function configFilePath(searchDir: string): string | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAkFD,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,YAAY,GAAE,OAAO,CAAC,sBAAsB,CAAM,GACjD,sBAAsB,CAmBxB;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/D"}

package/dist/config.js

@@ -0,0 +1,102 @@
+import { readFileSync, existsSync } from "fs";
+import { resolve, join } from "path";
+const DEFAULTS = {
+    failOn: "any",
+    maxFiles: 5000,
+    exclude: [],
+};
+function findConfigFile(startDir) {
+    const names = ["guardbee.yml", "guardbee.yaml", ".guardbee.yml"];
+    let dir = resolve(startDir);
+    for (let i = 0; i < 5; i++) {
+        for (const name of names) {
+            const p = join(dir, name);
+            if (existsSync(p))
+                return p;
+        }
+        const parent = resolve(dir, "..");
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+// Minimal YAML parser — only handles the flat key: value and list items we need
+function parseYaml(content) {
+    const root = {};
+    let currentSection = null;
+    let currentKey = null;
+    let currentList = null;
+    for (const rawLine of content.split("\n")) {
+        const line = rawLine.replace(/#.*$/, "");
+        if (!line.trim())
+            continue;
+        const indent = line.match(/^(\s*)/)?.[1].length ?? 0;
+        if (indent === 0 && line.trim().endsWith(":")) {
+            if (currentKey && currentList) {
+                root[currentSection][currentKey] = currentList;
+                currentList = null;
+                currentKey = null;
+            }
+            currentSection = line.trim().slice(0, -1);
+            root[currentSection] = {};
+            continue;
+        }
+        if (indent === 2 && currentSection) {
+            if (currentKey && currentList) {
+                root[currentSection][currentKey] = currentList;
+                currentList = null;
+                currentKey = null;
+            }
+            const colonIdx = line.indexOf(":");
+            if (colonIdx === -1)
+                continue;
+            const key = line.slice(0, colonIdx).trim();
+            const value = line.slice(colonIdx + 1).trim();
+            if (value === "") {
+                currentKey = key;
+                currentList = [];
+            }
+            else {
+                root[currentSection][key] = value;
+            }
+            continue;
+        }
+        if (indent === 4 && currentList !== null) {
+            const item = line.trim().replace(/^-\s*/, "").replace(/^['"]|['"]$/g, "");
+            currentList.push(item);
+            continue;
+        }
+    }
+    if (currentKey && currentList && currentSection) {
+        root[currentSection][currentKey] = currentList;
+    }
+    return root;
+}
+export function loadConfig(searchDir, cliOverrides = {}) {
+    const configPath = findConfigFile(searchDir);
+    if (!configPath)
+        return { ...DEFAULTS, ...cliOverrides };
+    let fileConfig = {};
+    try {
+        const raw = readFileSync(configPath, "utf8");
+        const parsed = parseYaml(raw);
+        const section = parsed["mcp-server-auditor"];
+        if (section) {
+            if (typeof section["fail-on"] === "string")
+                fileConfig.failOn = section["fail-on"];
+            if (typeof section["max-files"] === "string")
+                fileConfig.maxFiles = parseInt(section["max-files"], 10);
+            if (Array.isArray(section["exclude"]))
+                fileConfig.exclude = section["exclude"];
+        }
+    }
+    catch {
+        // ignore parse errors, use defaults
+    }
+    return { ...DEFAULTS, ...fileConfig, ...cliOverrides };
+}
+export function configFilePath(searchDir) {
+    return findConfigFile(searchDir);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAiBrC,MAAM,QAAQ,GAA2B;IACvC,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAoB,IAAI,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAe,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC7E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC5E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE9C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACjB,UAAU,GAAG,GAAG,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACL,IAAI,CAAC,cAAc,CAA6B,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjE,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;IAC9E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,SAAiB,EACjB,eAAgD,EAAE;IAElD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAEzD,IAAI,UAAU,GAAoC,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAwC,CAAC;QACpF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAE,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAa,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { scanText, scanFile, scanDirectory } from "./scanner.js";
+export { MCP_AUDITOR_PATTERNS } from "./patterns.js";
+export type { Finding, ScanResult } from "./scanner.js";
+export type { McpAuditPattern, AuditCategory } from "./patterns.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { scanText, scanFile, scanDirectory } from "./scanner.js";
+export { MCP_AUDITOR_PATTERNS } from "./patterns.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/patterns.d.ts

@@ -0,0 +1,20 @@
+export type AuditCategory = "excessive-agency" | "unsafe-input" | "loose-schema" | "secrets-exposure" | "network-exposure";
+export interface McpAuditPattern {
+    id: string;
+    name: string;
+    category: AuditCategory;
+    pattern: RegExp;
+    severity: "critical" | "high" | "medium" | "low";
+    /** Neden riskli olduğu ve ne yapılması gerektiği — bulgu ile birlikte gösterilir. */
+    recommendation: string;
+}
+/**
+ * `ai-code-scanner`'ın aksine bu paket "LLM entegrasyon kodu"na değil,
+ * **MCP server'ın kendisine** bakıyor: bir tool tanımı (`server.tool(...)`)
+ * ne kadar yetkili, parametreleri ne kadar gevşek, handler'ı hangi
+ * sink'lere (shell/fs/http/sql) doğrudan tool girdisi geçiriyor. Regex'ler
+ * heuristic'tir — tam bir AST/tip analizi yapmaz, düşük yanlış-pozitifli
+ * kalıplara odaklanır (secret-scanner ve ai-code-scanner'la aynı felsefe).
+ */
+export declare const MCP_AUDITOR_PATTERNS: McpAuditPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,kBAAkB,GAClB,cAAc,GACd,cAAc,GACd,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,qFAAqF;IACrF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,eAAe,EAqGjD,CAAC"}

package/dist/patterns.js

@@ -0,0 +1,96 @@
+/**
+ * `ai-code-scanner`'ın aksine bu paket "LLM entegrasyon kodu"na değil,
+ * **MCP server'ın kendisine** bakıyor: bir tool tanımı (`server.tool(...)`)
+ * ne kadar yetkili, parametreleri ne kadar gevşek, handler'ı hangi
+ * sink'lere (shell/fs/http/sql) doğrudan tool girdisi geçiriyor. Regex'ler
+ * heuristic'tir — tam bir AST/tip analizi yapmaz, düşük yanlış-pozitifli
+ * kalıplara odaklanır (secret-scanner ve ai-code-scanner'la aynı felsefe).
+ */
+export const MCP_AUDITOR_PATTERNS = [
+    // ── Excessive agency ───────────────────────────────────────────────────────
+    {
+        id: "shell_exec_from_tool_input",
+        name: "Tool handler passes raw tool input to a shell/process exec call",
+        category: "excessive-agency",
+        pattern: /\b(?:execSync|spawnSync|exec|spawn)\s*\(\s*(?:input|params|args)\s*\.\s*\w+/g,
+        severity: "critical",
+        recommendation: "A tool parameter is passed straight into a shell/process exec call. Any caller of this tool — including a prompt-injected LLM upstream — can run arbitrary commands. Validate against a strict allowlist of commands/args instead of executing the parameter directly.",
+    },
+    {
+        id: "eval_of_tool_input",
+        name: "Tool handler evaluates raw tool input as code",
+        category: "excessive-agency",
+        pattern: /\b(?:eval|new\s+Function)\s*\(\s*(?:input|params|args)\s*\.\s*\w+/g,
+        severity: "critical",
+        recommendation: "Executing a tool parameter as code turns any caller of this tool into a remote code execution vector. Never eval() input; parse and validate it as data instead.",
+    },
+    {
+        id: "unrestricted_shell_tool_name",
+        name: "Tool name grants shell/arbitrary code or SQL execution",
+        category: "excessive-agency",
+        pattern: /\.tool\(\s*["'](?:run_shell|execute_command|run_command|execute_shell|eval_code|execute_code|run_script|shell_exec|run_sql|execute_sql|run_query)["']/gi,
+        severity: "high",
+        recommendation: "A tool named like this typically hands the calling LLM arbitrary shell/code/SQL execution. If intentional, gate it behind an explicit opt-in config flag (off by default) and a strict allowlist — not just a cautious-sounding tool description.",
+    },
+    // ── Unsafe input handling ───────────────────────────────────────────────────
+    {
+        id: "fs_write_from_raw_tool_input",
+        name: "Filesystem write/delete uses a raw tool input path",
+        category: "unsafe-input",
+        pattern: /\b(?:writeFileSync|unlinkSync|rmSync|appendFileSync|renameSync)\s*\(\s*(?:input|params|args)\s*\.\s*\w+/g,
+        severity: "high",
+        recommendation: "A path taken directly from tool input is used in a filesystem write/delete call with no visible sanitization — a caller can supply '../'-style paths (path traversal). Resolve the path and verify it stays inside an allowed base directory before touching the filesystem.",
+    },
+    {
+        id: "ssrf_fetch_from_tool_input",
+        name: "Outbound HTTP request target comes directly from tool input",
+        category: "unsafe-input",
+        pattern: /\b(?:fetch|axios\.get|axios\.post|axios\.request|http\.get|https\.get)\s*\(\s*(?:input|params|args)\s*\.\s*\w+/g,
+        severity: "high",
+        recommendation: "A request URL/host taken directly from tool input, with no visible allowlist, lets a caller make this server request internal or private URLs (SSRF) — e.g. a cloud metadata endpoint. Validate the host against an allowlist before making the request.",
+    },
+    {
+        id: "sql_injection_via_tool_input",
+        name: "SQL statement built by interpolating raw tool input",
+        category: "unsafe-input",
+        pattern: /\b(?:SELECT|INSERT|UPDATE|DELETE)\b[\s\S]{0,200}?\$\{\s*(?:input|params|args)\s*\.\s*\w+/gi,
+        severity: "critical",
+        recommendation: "A SQL statement is built with a template-literal interpolation of a raw tool parameter — classic SQL injection, now reachable by anything that can call this tool. Use parameterized queries; never interpolate tool input into SQL text.",
+    },
+    // ── Loose schema ────────────────────────────────────────────────────────────
+    {
+        id: "overly_permissive_tool_schema",
+        name: "Tool parameter typed z.any()/z.unknown()",
+        category: "loose-schema",
+        pattern: /\.tool\(\s*["'][\w-]+["'][\s\S]{0,300}?:\s*z\.(?:any|unknown)\(\)/g,
+        severity: "medium",
+        recommendation: "A parameter typed z.any()/z.unknown() accepts anything, including shapes the handler doesn't expect — this often becomes an injection point downstream (a NoSQL/SQL filter, a shell arg). Give every parameter the narrowest schema that covers legitimate input.",
+    },
+    // ── Secrets exposure ────────────────────────────────────────────────────────
+    {
+        id: "hardcoded_secret_in_tool_schema",
+        name: "Credential-shaped tool parameter has a hardcoded default",
+        category: "secrets-exposure",
+        pattern: /\b(?:apiKey|token|secret|password|accessKey)\s*:\s*z\.string\(\)[^,\n]*\.default\(\s*["'][^"']{8,}["']\s*\)/gi,
+        severity: "critical",
+        recommendation: "A tool schema's default value for a credential-shaped field is a hardcoded literal. Defaults ship in the published server/manifest and are visible to anyone who inspects it. Never default a secret field — require it to be supplied via environment/config.",
+    },
+    {
+        id: "full_env_exposed_to_tool_caller",
+        name: "The whole process.env is spread, stringified, or returned",
+        category: "secrets-exposure",
+        pattern: /(?:\.\.\.\s*process\.env\b)|(?:JSON\.stringify\(\s*process\.env\s*\))|(?:return\s+process\.env\s*[;\n])/g,
+        severity: "critical",
+        recommendation: "The entire process.env object is being spread, serialized, or returned instead of reading one named variable. If this happens inside a tool handler, the calling LLM — and thus any prompt-injected instruction upstream — can potentially read every secret in this process's environment. Only read specific, named variables.",
+    },
+    // ── Network exposure ─────────────────────────────────────────────────────────
+    {
+        id: "permissive_cors_on_server",
+        name: "Wildcard or default-open CORS on the server's HTTP transport",
+        category: "network-exposure",
+        pattern: /\bAccess-Control-Allow-Origin["']?\s*[:,=]\s*["']\*["']|\bcors\(\s*\)/g,
+        severity: "medium",
+        recommendation: "A wildcard CORS origin (or the cors() middleware called with no options, which defaults to allow-all) lets any website make requests to this MCP server's HTTP transport from a victim's browser. Restrict Access-Control-Allow-Origin to a known allowlist.",
+    },
+];
+//# sourceMappingURL=patterns.js.map

package/dist/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,8EAA8E;IAC9E;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,iEAAiE;QACvE,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,8EAA8E;QACvF,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,wQAAwQ;KAC3Q;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,+CAA+C;QACrD,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,kKAAkK;KACrK;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,wDAAwD;QAC9D,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EACL,yJAAyJ;QAC3J,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,mPAAmP;KACtP;IAED,+EAA+E;IAC/E;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,oDAAoD;QAC1D,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,0GAA0G;QACnH,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,8QAA8Q;KACjR;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,6DAA6D;QACnE,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,iHAAiH;QAC1H,QAAQ,EAAE,MAAM;QAChB,cAAc,EACZ,0PAA0P;KAC7P;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,qDAAqD;QAC3D,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,4FAA4F;QACrG,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,2OAA2O;KAC9O;IAED,+EAA+E;IAC/E;QACE,EAAE,EAAE,+BAA+B;QACnC,IAAI,EAAE,0CAA0C;QAChD,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,mQAAmQ;KACtQ;IAED,+EAA+E;IAC/E;QACE,EAAE,EAAE,iCAAiC;QACrC,IAAI,EAAE,0DAA0D;QAChE,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,+GAA+G;QACxH,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,gQAAgQ;KACnQ;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,IAAI,EAAE,2DAA2D;QACjE,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,0GAA0G;QACnH,QAAQ,EAAE,UAAU;QACpB,cAAc,EACZ,kUAAkU;KACrU;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,8DAA8D;QACpE,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,wEAAwE;QACjF,QAAQ,EAAE,QAAQ;QAClB,cAAc,EACZ,8PAA8P;KACjQ;CACF,CAAC"}

package/dist/sarif.d.ts

@@ -0,0 +1,3 @@
+import type { Finding } from "./scanner.js";
+export declare function buildSarif(toolVersion: string, findings: Finding[]): object;
+//# sourceMappingURL=sarif.d.ts.map

package/dist/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../src/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AA6B5C,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAyD3E"}

package/dist/sarif.js

@@ -0,0 +1,60 @@
+function severityToLevel(sev) {
+    if (sev === "critical" || sev === "high")
+        return "error";
+    if (sev === "medium")
+        return "warning";
+    return "note";
+}
+export function buildSarif(toolVersion, findings) {
+    const rulesMap = new Map();
+    const results = [];
+    for (const f of findings) {
+        if (!rulesMap.has(f.patternId)) {
+            rulesMap.set(f.patternId, {
+                id: f.patternId,
+                name: f.patternName.replace(/[^a-zA-Z0-9]/g, ""),
+                shortDescription: { text: f.patternName },
+                fullDescription: { text: f.recommendation },
+                helpUri: "https://guardbee.ai/docs/mcp-server-auditor",
+                properties: {
+                    "problem.severity": f.severity,
+                    tags: ["security", "mcp-security", f.category],
+                },
+            });
+        }
+        const result = {
+            ruleId: f.patternId,
+            level: severityToLevel(f.severity),
+            message: { text: `${f.patternName} — ${f.recommendation}` },
+        };
+        if (f.file) {
+            result.locations = [
+                {
+                    physicalLocation: {
+                        artifactLocation: { uri: f.file, uriBaseId: "%SRCROOT%" },
+                        region: { startLine: f.line, startColumn: f.column },
+                    },
+                },
+            ];
+        }
+        results.push(result);
+    }
+    return {
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "@guardbee/mcp-server-auditor",
+                        version: toolVersion,
+                        informationUri: "https://guardbee.ai",
+                        rules: Array.from(rulesMap.values()),
+                    },
+                },
+                results,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=sarif.js.map

package/dist/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../src/sarif.ts"],"names":[],"mappings":"AAuBA,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,QAAmB;IACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC9C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;gBACxB,EAAE,EAAE,CAAC,CAAC,SAAS;gBACf,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;gBAChD,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gBACzC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE;gBAC3C,OAAO,EAAE,6CAA6C;gBACtD,UAAU,EAAE;oBACV,kBAAkB,EAAE,CAAC,CAAC,QAAQ;oBAC9B,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC;iBAC/C;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAgB;YAC1B,MAAM,EAAE,CAAC,CAAC,SAAS;YACnB,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE;SAC5D,CAAC;QAEF,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,CAAC,SAAS,GAAG;gBACjB;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;wBACzD,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;qBACrD;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO,EACL,gGAAgG;QAClG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,8BAA8B;wBACpC,OAAO,EAAE,WAAW;wBACpB,cAAc,EAAE,qBAAqB;wBACrC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBACrC;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,32 @@
+import { type McpAuditPattern } from "./patterns.js";
+export interface Finding {
+    patternId: string;
+    patternName: string;
+    category: McpAuditPattern["category"];
+    severity: McpAuditPattern["severity"];
+    recommendation: string;
+    file?: string;
+    line: number;
+    column: number;
+    /** Eşleşen kod parçası — bir secret değil bir kalıp olduğu için redakte edilmez. */
+    match: string;
+    context: string;
+}
+export interface ScanResult {
+    scannedFiles: number;
+    skippedFiles: number;
+    totalFindings: number;
+    findings: Finding[];
+    durationMs: number;
+}
+export declare function scanText(text: string, filePath?: string): Finding[];
+export declare function scanFile(filePath: string): {
+    findings: Finding[];
+    skipped: boolean;
+};
+export declare function scanDirectory(dirPath: string, options?: {
+    maxFiles?: number;
+    include?: string[];
+    exclude?: string[];
+}): ScanResult;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3E,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACtC,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAoBD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CAoCnE;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAqBpF;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1E,UAAU,CAuDZ"}

package/dist/scanner.js

@@ -0,0 +1,128 @@
+import { readFileSync, statSync, readdirSync } from "fs";
+import { join, relative, extname } from "path";
+import { MCP_AUDITOR_PATTERNS } from "./patterns.js";
+const SKIP_EXTENSIONS = new Set([
+    ".png", ".jpg", ".jpeg", ".gif", ".svg", ".ico", ".webp", ".bmp",
+    ".pdf", ".zip", ".tar", ".gz", ".bz2", ".rar", ".7z",
+    ".exe", ".dll", ".so", ".dylib", ".bin", ".wasm",
+    ".mp3", ".mp4", ".avi", ".mov", ".wav",
+    ".ttf", ".woff", ".woff2", ".eot",
+    ".lock",
+]);
+const SKIP_DIRS = new Set([
+    "node_modules", ".git", ".svn", "dist", "build", ".next",
+    "__pycache__", ".mypy_cache", ".pytest_cache", "venv", ".venv",
+    "coverage", ".nyc_output",
+]);
+const MAX_FILE_SIZE = 1 * 1024 * 1024; // 1 MB
+const MAX_CONTEXT_LENGTH = 240;
+export function scanText(text, filePath) {
+    const findings = [];
+    const lines = text.split("\n");
+    for (const p of MCP_AUDITOR_PATTERNS) {
+        const re = new RegExp(p.pattern.source, p.pattern.flags);
+        let m;
+        while ((m = re.exec(text)) !== null) {
+            const matchStr = m[0];
+            const before = text.slice(0, m.index);
+            const line = before.split("\n").length;
+            const lastNl = before.lastIndexOf("\n");
+            const column = m.index - (lastNl === -1 ? 0 : lastNl + 1) + 1;
+            const contextLine = lines[line - 1] ?? "";
+            findings.push({
+                patternId: p.id,
+                patternName: p.name,
+                category: p.category,
+                severity: p.severity,
+                recommendation: p.recommendation,
+                file: filePath,
+                line,
+                column,
+                match: matchStr.trim().slice(0, MAX_CONTEXT_LENGTH),
+                context: contextLine.trim().slice(0, MAX_CONTEXT_LENGTH),
+            });
+            // Sıfır genişlikli eşleşmelerde sonsuz döngüyü önle
+            if (m.index === re.lastIndex)
+                re.lastIndex++;
+        }
+    }
+    return findings;
+}
+export function scanFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    if (SKIP_EXTENSIONS.has(ext))
+        return { findings: [], skipped: true };
+    let stat;
+    try {
+        stat = statSync(filePath);
+    }
+    catch {
+        return { findings: [], skipped: true };
+    }
+    if (!stat.isFile() || stat.size > MAX_FILE_SIZE)
+        return { findings: [], skipped: true };
+    let content;
+    try {
+        content = readFileSync(filePath, "utf8");
+    }
+    catch {
+        return { findings: [], skipped: true };
+    }
+    return { findings: scanText(content, filePath), skipped: false };
+}
+export function scanDirectory(dirPath, options = {}) {
+    const start = Date.now();
+    const { maxFiles = 5000, include, exclude } = options;
+    const allFindings = [];
+    let scannedFiles = 0;
+    let skippedFiles = 0;
+    function walk(dir) {
+        if (scannedFiles + skippedFiles >= maxFiles)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                if (SKIP_DIRS.has(entry.name) || entry.name.startsWith("."))
+                    continue;
+                if (exclude?.some((ex) => entry.name === ex || fullPath.includes(ex)))
+                    continue;
+                walk(fullPath);
+            }
+            else if (entry.isFile()) {
+                const relPath = relative(dirPath, fullPath);
+                if (exclude?.some((ex) => relPath.includes(ex))) {
+                    skippedFiles++;
+                    continue;
+                }
+                if (include && !include.some((inc) => relPath.includes(inc))) {
+                    skippedFiles++;
+                    continue;
+                }
+                const { findings, skipped } = scanFile(fullPath);
+                if (skipped) {
+                    skippedFiles++;
+                }
+                else {
+                    scannedFiles++;
+                    allFindings.push(...findings);
+                }
+            }
+        }
+    }
+    walk(dirPath);
+    return {
+        scannedFiles,
+        skippedFiles,
+        totalFindings: allFindings.length,
+        findings: allFindings,
+        durationMs: Date.now() - start,
+    };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAwB,MAAM,eAAe,CAAC;AAwB3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IACpD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IAChD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;IACjC,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IACxD,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO;IAC9D,UAAU,EAAE,aAAa;CAC1B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAC9C,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAiB;IACtD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,CAAC,CAAC,EAAE;gBACf,WAAW,EAAE,CAAC,CAAC,IAAI;gBACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM;gBACN,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;gBACnD,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;aACzD,CAAC,CAAC;YAEH,oDAAoD;YACpD,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;gBAAE,EAAE,CAAC,SAAS,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAErE,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAExF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,UAAyE,EAAE;IAE3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,YAAY,GAAG,YAAY,IAAI,QAAQ;YAAE,OAAO;QAEpD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACtE,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAChD,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7D,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,YAAY,EAAE,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,YAAY,EAAE,CAAC;oBACf,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,CAAC;IAEd,OAAO;QACL,YAAY;QACZ,YAAY;QACZ,aAAa,EAAE,WAAW,CAAC,MAAM;QACjC,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,2 @@
+export declare function startServer(): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAkCA,wBAAsB,WAAW,kBAmFhC"}

package/dist/server.js

@@ -0,0 +1,87 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { instrumentServer } from "@guardbee/mcp-telemetry";
+import { z } from "zod";
+import { scanText, scanFile, scanDirectory } from "./scanner.js";
+import { MCP_AUDITOR_PATTERNS } from "./patterns.js";
+function formatFindings(findings, scannedFiles, durationMs) {
+    if (findings.length === 0) {
+        return `✅ No MCP server security issues found. Scanned ${scannedFiles} file(s) in ${durationMs}ms.`;
+    }
+    const bySeverity = { critical: 0, high: 0, medium: 0, low: 0 };
+    for (const f of findings)
+        bySeverity[f.severity]++;
+    const lines = [
+        `⚠️  Found ${findings.length} MCP server security issue(s) in ${scannedFiles} file(s) (${durationMs}ms)`,
+        `   Critical: ${bySeverity.critical}  High: ${bySeverity.high}  Medium: ${bySeverity.medium}  Low: ${bySeverity.low}`,
+        "",
+    ];
+    for (const f of findings) {
+        const loc = f.file ? `${f.file}:${f.line}:${f.column}` : `line ${f.line}:${f.column}`;
+        lines.push(`[${f.severity.toUpperCase()}] ${f.patternName} (${f.category})`);
+        lines.push(`  Location       : ${loc}`);
+        lines.push(`  Match          : ${f.match}`);
+        lines.push(`  Recommendation : ${f.recommendation}`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+export async function startServer() {
+    const server = new McpServer({
+        name: "guardbee-mcp-server-auditor",
+        version: "0.1.0",
+    });
+    instrumentServer(server, "mcp-server-auditor");
+    server.tool("scan_text", "Scan a text string or code snippet for insecure MCP server/tool-definition patterns (excessive-agency tool names, shell/eval/SQL/SSRF sinks fed by raw tool input, overly permissive schemas, hardcoded secrets, wildcard CORS).", {
+        content: z.string().describe("The code content to scan"),
+        label: z.string().optional().describe("Optional label shown in findings (e.g. filename)"),
+    }, async ({ content, label }) => {
+        const findings = scanText(content, label);
+        return { content: [{ type: "text", text: formatFindings(findings, 1, 0) }] };
+    });
+    server.tool("scan_file", "Scan a single file for insecure MCP server/tool-definition patterns", {
+        path: z.string().describe("Absolute or relative path to the file to scan"),
+    }, async ({ path: filePath }) => {
+        const { findings, skipped } = scanFile(filePath);
+        if (skipped) {
+            return {
+                content: [{ type: "text", text: `⏭️  File skipped (binary, too large, or unreadable): ${filePath}` }],
+            };
+        }
+        return { content: [{ type: "text", text: formatFindings(findings, 1, 0) }] };
+    });
+    server.tool("scan_directory", "Recursively scan an MCP server's codebase for insecure tool-definition patterns. Automatically skips node_modules, .git, dist, and binary files.", {
+        path: z.string().describe("Absolute or relative path to the directory to scan"),
+        maxFiles: z.number().optional().describe("Maximum number of files to scan (default: 5000)"),
+        include: z
+            .array(z.string())
+            .optional()
+            .describe("Only scan files whose path contains one of these strings (e.g. [\".ts\", \"src/tools\"])"),
+        exclude: z
+            .array(z.string())
+            .optional()
+            .describe("Skip files/dirs whose path contains one of these strings"),
+    }, async ({ path: dirPath, maxFiles, include, exclude }) => {
+        const result = scanDirectory(dirPath, { maxFiles, include, exclude });
+        return { content: [{ type: "text", text: formatFindings(result.findings, result.scannedFiles, result.durationMs) }] };
+    });
+    server.tool("list_patterns", "List all MCP server security patterns that the auditor can detect, grouped by category", {}, async () => {
+        const lines = ["Supported MCP server security patterns:\n"];
+        const byCategory = new Map();
+        for (const p of MCP_AUDITOR_PATTERNS) {
+            const list = byCategory.get(p.category) ?? [];
+            list.push(p);
+            byCategory.set(p.category, list);
+        }
+        for (const [category, patterns] of byCategory) {
+            lines.push(`[${category}]`);
+            for (const p of patterns)
+                lines.push(`  • ${p.name} (${p.id}, ${p.severity})`);
+            lines.push("");
+        }
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,SAAS,cAAc,CAAC,QAAmB,EAAE,YAAoB,EAAE,UAAkB;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,kDAAkD,YAAY,eAAe,UAAU,KAAK,CAAC;IACtG,CAAC;IAED,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEnD,MAAM,KAAK,GAAa;QACtB,aAAa,QAAQ,CAAC,MAAM,oCAAoC,YAAY,aAAa,UAAU,KAAK;QACxG,gBAAgB,UAAU,CAAC,QAAQ,WAAW,UAAU,CAAC,IAAI,aAAa,UAAU,CAAC,MAAM,UAAU,UAAU,CAAC,GAAG,EAAE;QACrH,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IACH,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAE/C,MAAM,CAAC,IAAI,CACT,WAAW,EACX,kOAAkO,EAClO;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;KAC1F,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qEAAqE,EACrE;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wDAAwD,QAAQ,EAAE,EAAE,CAAC;aACtG,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,kJAAkJ,EAClJ;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QAC3F,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,0FAA0F,CAAC;QACvG,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;KACxE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,wFAAwF,EACxF,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@guardbee/mcp-server-auditor",
+  "version": "0.1.0",
+  "description": "MCP server that audits other MCP servers' tool definitions for insecure patterns — excessive-agency tool names, shell/eval/SQL/SSRF sinks fed by raw tool input, overly permissive schemas, hardcoded secrets, and wildcard CORS",
+  "type": "module",
+  "bin": {
+    "guardbee-mcp-server-auditor": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "zod": "^4.5.4",
+    "@guardbee/mcp-telemetry": "^0.1.0"
+  },
+  "keywords": [
+    "mcp",
+    "security",
+    "mcp-security",
+    "ai-security",
+    "sast",
+    "guardbee",
+    "devtools"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/GuardBee/guardbee-mcp.git"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/cli.js",
+    "test": "vitest run"
+  }
+}