@nohacklabs/mcp-server 1.0.0

package/README.md

@@ -0,0 +1,243 @@
+# NoHack Security MCP Server
+
+An MCP (Model Context Protocol) server that provides a **generalized Directus query interface** for the NoHack security scanning API. This follows the same pattern as the AI chat agent, using a powerful `query_collection` tool that leverages Directus's full query capabilities.
+
+## Key Design
+
+Instead of creating specific tools for each entity (list_scans, list_vulnerabilities, etc.), this MCP server uses a **generalized approach**:
+
+1. **`query_collection`** - The powerhouse tool that can query ANY Directus collection with full filter, aggregate, groupBy, sort, and pagination support
+2. **`get_collection_schema`** - Discover fields and relations before querying
+3. **Convenience tools** - For fetching full records with all relations
+
+This approach is more flexible and maintainable - any new query capability in Directus is automatically available without code changes.
+
+## Tools
+
+### Schema Discovery
+| Tool | Description |
+|------|-------------|
+| `get_collection_schema` | Get fields, types, and relations for any collection |
+
+### The Powerhouse Tool
+| Tool | Description |
+|------|-------------|
+| `query_collection` | Generic Directus query with full capabilities |
+
+### Convenience Tools
+| Tool | Description |
+|------|-------------|
+| `get_scan_details` | Full scan with vulns/secrets |
+| `get_vulnerability_details` | Full vulnerability record |
+| `get_repo_config_details` | Full repo with all relations |
+| `get_organization` | Organization details |
+
+## Available Collections
+
+- `scans` - Security scan records
+- `vulnerabilities` - Detected vulnerabilities
+- `secrets` - Detected secrets
+- `github_repo_config` - Repository configurations
+- `organisations` - Organization data
+
+## Query Examples
+
+### List Recent Scans
+
+```json
+{
+  "collection": "scans",
+  "fields": ["id", "session_id", "scan_type", "url", "branch", "date_created"],
+  "sort": ["-date_created"],
+  "limit": 10,
+  "orgId": "org-123"
+}
+```
+
+### Count Vulnerabilities by Severity
+
+```json
+{
+  "collection": "vulnerabilities",
+  "aggregate": { "count": "*" },
+  "groupBy": ["severity"],
+  "limit": -1,
+  "orgId": "org-123"
+}
+```
+
+### Critical Vulnerabilities from Last 7 Days
+
+```json
+{
+  "collection": "vulnerabilities",
+  "filter": {
+    "_and": [
+      { "severity": { "_eq": "Critical" } },
+      { "date_created": { "_gte": "$NOW(-7 days)" } }
+    ]
+  },
+  "fields": ["id", "type", "file", "line", "description"],
+  "limit": 50,
+  "orgId": "org-123"
+}
+```
+
+### Vulnerabilities for a Specific Repo
+
+```json
+{
+  "collection": "vulnerabilities",
+  "filter": {
+    "scan": {
+      "repo_config": {
+        "name": { "_eq": "my-repo" }
+      }
+    }
+  },
+  "fields": ["id", "type", "severity", "file", "scan.repo_config.name"],
+  "limit": 100
+}
+```
+
+### Vulnerability Trend by Month
+
+```json
+{
+  "collection": "vulnerabilities",
+  "aggregate": { "count": "*" },
+  "groupBy": ["year(date_created)", "month(date_created)"],
+  "sort": ["year(date_created)", "month(date_created)"],
+  "limit": -1,
+  "orgId": "org-123"
+}
+```
+
+### Repos with Most Critical Vulnerabilities
+
+```json
+{
+  "collection": "vulnerabilities",
+  "filter": { "severity": { "_eq": "Critical" } },
+  "aggregate": { "count": "*" },
+  "groupBy": ["repo_config"],
+  "fields": ["repo_config.name", "repo_config.full_name"],
+  "sort": ["-count"],
+  "limit": -1
+}
+```
+
+## Filter Operators
+
+| Operator | Description | Example |
+|----------|-------------|---------|
+| `_eq` | Equals | `{ "severity": { "_eq": "Critical" } }` |
+| `_neq` | Not equals | `{ "status": { "_neq": "archived" } }` |
+| `_in` | In array | `{ "severity": { "_in": ["Critical", "High"] } }` |
+| `_gt`, `_gte`, `_lt`, `_lte` | Comparisons | `{ "confidence": { "_gte": 80 } }` |
+| `_contains`, `_icontains` | Text search | `{ "file": { "_icontains": "auth" } }` |
+| `_starts_with`, `_ends_with` | Text match | `{ "file": { "_ends_with": ".js" } }` |
+| `_null`, `_nnull` | Null checks | `{ "description": { "_nnull": true } }` |
+| `_and`, `_or` | Logical | `{ "_and": [{...}, {...}] }` |
+
+## Dynamic Date Expressions
+
+Directus supports `$NOW()` for relative dates:
+
+| Expression | Meaning |
+|------------|---------|
+| `$NOW(-7 days)` | 7 days ago |
+| `$NOW(-1 month)` | 1 month ago |
+| `$NOW(-1 year)` | 1 year ago |
+| `$NOW(-2 weeks)` | 2 weeks ago |
+
+## Installation
+
+### From npm (Recommended)
+
+```bash
+npm install -g @nohacklabs/mcp-server
+```
+
+Or use directly with `npx`:
+
+```bash
+npx @nohacklabs/mcp-server
+```
+
+### From Source
+
+```bash
+git clone https://github.com/nohacklabs/mcp-server
+cd mcp-server
+npm install
+npm run build
+```
+
+## Configuration
+
+The server requires two environment variables:
+
+| Variable | Description |
+|----------|-------------|
+| `NOHACK_API_URL` | Your NoHack API endpoint |
+| `NOHACK_API_TOKEN` | Your API authentication token |
+
+## Usage
+
+### Claude Desktop Integration
+
+Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "nohack-security": {
+      "command": "npx",
+      "args": ["-y", "@nohacklabs/mcp-server"],
+      "env": {
+        "NOHACK_API_URL": "https://your-api-endpoint.com",
+        "NOHACK_API_TOKEN": "your-api-token"
+      }
+    }
+  }
+}
+```
+
+### Cursor Integration
+
+Add to `.cursor/mcp.json` in your project or `~/.cursor/mcp.json` globally:
+
+```json
+{
+  "mcpServers": {
+    "nohack-security": {
+      "command": "npx",
+      "args": ["-y", "@nohacklabs/mcp-server"],
+      "env": {
+        "NOHACK_API_URL": "https://your-api-endpoint.com",
+        "NOHACK_API_TOKEN": "your-api-token"
+      }
+    }
+  }
+}
+```
+
+### Test with MCP Inspector
+
+```bash
+npx @anthropic-ai/mcp-inspector npx @nohacklabs/mcp-server
+```
+
+## Development
+
+```bash
+npm install      # Install dependencies
+npm run build    # Build TypeScript
+npm run dev      # Watch mode
+npm run inspector # Test with MCP Inspector
+```
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,525 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+// ============================================================================
+// DIRECTUS API CLIENT
+// ============================================================================
+class DirectusClient {
+    apiUrl;
+    token;
+    constructor(apiUrl, token) {
+        this.apiUrl = apiUrl;
+        this.token = token;
+    }
+    async fetch(endpoint, options) {
+        const url = `${this.apiUrl}${endpoint}`;
+        const response = await fetch(url, {
+            ...options,
+            headers: {
+                Authorization: `Bearer ${this.token}`,
+                "Content-Type": "application/json",
+                ...options?.headers,
+            },
+        });
+        if (!response.ok) {
+            throw new Error(`API Error: ${response.status} ${response.statusText}`);
+        }
+        return response.json();
+    }
+    // ---------------------------------------------------------------------------
+    // Schema Discovery
+    // ---------------------------------------------------------------------------
+    async getCollectionSchema(collection) {
+        const result = await this.fetch(`/fields/${collection}`);
+        const fields = result.data || [];
+        // Filter out system/hidden fields and extract essential info
+        const relevantFields = fields
+            .filter((f) => !f.meta?.hidden &&
+            ![
+                "sort",
+                "user_created",
+                "user_updated",
+                "date_created",
+                "date_updated",
+            ].includes(f.field))
+            .map((field) => {
+            const isRelation = field.schema?.foreign_key_table ||
+                field.meta?.special?.includes("m2o") ||
+                field.meta?.special?.includes("o2m");
+            return {
+                field: field.field,
+                type: field.type,
+                ...(isRelation && {
+                    relation: field.meta?.related_collection || field.schema?.foreign_key_table,
+                    relationType: field.meta?.special?.find((s) => ["m2o", "o2m", "m2m"].includes(s)),
+                }),
+            };
+        });
+        const regularFields = relevantFields.filter((f) => !f.relation);
+        const relationFields = relevantFields.filter((f) => f.relation);
+        return {
+            collection,
+            totalFields: relevantFields.length,
+            fields: regularFields.map((f) => `${f.field} (${f.type})`),
+            relations: relationFields.map((f) => `${f.field} → ${f.relation} (${f.relationType})`),
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Generic Query
+    // ---------------------------------------------------------------------------
+    async queryCollection(options) {
+        const { collection, filter, aggregate, groupBy, sort, limit, offset, fields, deep, orgId, } = options;
+        // Define org filter paths for each collection
+        const orgFilterPaths = {
+            scans: {
+                repo_config: {
+                    organisation: { _eq: orgId },
+                },
+            },
+            vulnerabilities: {
+                scan: {
+                    repo_config: {
+                        organisation: { _eq: orgId },
+                    },
+                },
+            },
+            secrets: {
+                session: {
+                    repo_config: {
+                        organisation: { _eq: orgId },
+                    },
+                },
+            },
+            github_repo_config: {
+                organisation: { _eq: orgId },
+            },
+            organisations: {
+                id: { _eq: orgId },
+            },
+        };
+        // Get org filter for this collection (if orgId provided)
+        let combinedFilter = filter;
+        if (orgId) {
+            const orgFilter = orgFilterPaths[collection];
+            if (orgFilter) {
+                combinedFilter = filter ? { _and: [orgFilter, filter] } : orgFilter;
+            }
+        }
+        const params = new URLSearchParams();
+        if (combinedFilter) {
+            params.set("filter", JSON.stringify(combinedFilter));
+        }
+        // Add aggregation
+        if (aggregate) {
+            if (aggregate.count) {
+                if (Array.isArray(aggregate.count)) {
+                    aggregate.count.forEach((field) => params.append("aggregate[count][]", field));
+                }
+                else {
+                    params.set("aggregate[count]", aggregate.count);
+                }
+            }
+            if (aggregate.avg) {
+                aggregate.avg.forEach((field) => params.append("aggregate[avg][]", field));
+            }
+            if (aggregate.sum) {
+                aggregate.sum.forEach((field) => params.append("aggregate[sum][]", field));
+            }
+            if (aggregate.min) {
+                aggregate.min.forEach((field) => params.append("aggregate[min][]", field));
+            }
+            if (aggregate.max) {
+                aggregate.max.forEach((field) => params.append("aggregate[max][]", field));
+            }
+            if (aggregate.countDistinct) {
+                aggregate.countDistinct.forEach((field) => params.append("aggregate[countDistinct][]", field));
+            }
+        }
+        // Add groupBy
+        if (groupBy && groupBy.length > 0) {
+            groupBy.forEach((field) => params.append("groupBy[]", field));
+        }
+        // Add sort
+        if (sort && sort.length > 0) {
+            sort.forEach((field) => params.append("sort[]", field));
+        }
+        // Add limit
+        if (limit !== undefined) {
+            params.set("limit", limit.toString());
+        }
+        // Add offset (for pagination)
+        if (offset !== undefined) {
+            params.set("offset", offset.toString());
+        }
+        // Add fields (supports dot notation for relations)
+        if (fields && fields.length > 0) {
+            fields.forEach((field) => params.append("fields[]", field));
+        }
+        // Add deep query parameters for nested relations
+        if (deep) {
+            Object.entries(deep).forEach(([key, value]) => {
+                if (typeof value === "object") {
+                    Object.entries(value).forEach(([deepKey, deepValue]) => {
+                        params.set(`deep[${key}][${deepKey}]`, String(deepValue));
+                    });
+                }
+            });
+        }
+        // Add meta for total count
+        params.set("meta", "total_count,filter_count");
+        const result = await this.fetch(`/items/${collection}?${params.toString()}`);
+        let data = result.data || [];
+        // Post-process: If we're grouping by a relation and requesting relation fields,
+        // Directus returns only UUIDs. We need to fetch the relation details separately.
+        if (groupBy && fields && data.length > 0) {
+            const relationFields = fields.filter((f) => f.includes("."));
+            const groupedRelations = groupBy.filter((g) => relationFields.some((f) => f.startsWith(g + ".")) &&
+                typeof data[0][g] === "string" // Check if it's a UUID (not expanded)
+            );
+            if (groupedRelations.length > 0) {
+                for (const relation of groupedRelations) {
+                    const relationIds = [
+                        ...new Set(data.map((item) => item[relation]).filter(Boolean)),
+                    ];
+                    if (relationIds.length === 0)
+                        continue;
+                    const relationCollection = relation === "repo_config"
+                        ? "github_repo_config"
+                        : relation === "scan"
+                            ? "scans"
+                            : relation === "session"
+                                ? "sessions"
+                                : relation;
+                    const subFields = relationFields
+                        .filter((f) => f.startsWith(relation + "."))
+                        .map((f) => f.substring(relation.length + 1));
+                    const relationParams = new URLSearchParams();
+                    relationParams.set("filter", JSON.stringify({ id: { _in: relationIds } }));
+                    subFields.forEach((sf) => relationParams.append("fields[]", sf));
+                    relationParams.append("fields[]", "id");
+                    relationParams.set("limit", "-1");
+                    const relationResult = await this.fetch(`/items/${relationCollection}?${relationParams.toString()}`);
+                    const relationMap = new Map(relationResult.data.map((item) => [item.id, item]));
+                    data = data.map((item) => {
+                        const relationId = item[relation];
+                        const relationDetails = relationMap.get(relationId);
+                        if (relationDetails) {
+                            return { ...item, [relation]: relationDetails };
+                        }
+                        return item;
+                    });
+                }
+            }
+        }
+        return {
+            data,
+            meta: result.meta || { total_count: 0, filter_count: 0 },
+            count: data.length,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Convenience Methods
+    // ---------------------------------------------------------------------------
+    async getScanById(scanId) {
+        const result = await this.fetch(`/items/scans/${scanId}?fields=*,secrets.*,vulnerabilities.*,repo_config.organisation,repo_config.name` +
+            `&deep[secrets][_limit]=-1&deep[secrets][_filter][status][_eq]=published` +
+            `&deep[vulnerabilities][_limit]=-1&deep[vulnerabilities][_filter][status][_in]=published,archived`);
+        return result.data;
+    }
+    async getVulnerabilityById(vulnId) {
+        const result = await this.fetch(`/items/vulnerabilities/${vulnId}`);
+        return result.data;
+    }
+    async getRepoConfigById(repoId) {
+        const result = await this.fetch(`/items/github_repo_config/${repoId}?fields=*,scans.*,secrets.*,vulnerabilities.*,organisation` +
+            `&deep[scans][_limit]=-1&deep[scans][_filter][status][_eq]=published` +
+            `&deep[secrets][_limit]=-1&deep[secrets][_filter][status][_eq]=published` +
+            `&deep[vulnerabilities][_limit]=-1`);
+        return {
+            repository: result.data,
+            scans: result.data.scans,
+            secrets: result.data.secrets,
+            vulnerabilities: result.data.vulnerabilities,
+        };
+    }
+    async getOrganization(orgId) {
+        const result = await this.fetch(`/items/organisations/${orgId}?fields=id,name,quota`);
+        return result.data;
+    }
+}
+// ============================================================================
+// MCP SERVER
+// ============================================================================
+const server = new McpServer({
+    name: "nohack-security-api",
+    version: "1.0.0",
+    description: "MCP server for NoHack security scanning API - Generic Directus query interface for managing repo configs, scans, vulnerabilities, and secrets",
+});
+// Get API configuration from environment
+function getClient() {
+    const apiUrl = process.env.NOHACK_API_URL;
+    const apiToken = process.env.NOHACK_API_TOKEN;
+    if (!apiUrl || !apiToken) {
+        throw new Error("NOHACK_API_URL and NOHACK_API_TOKEN environment variables are required");
+    }
+    return new DirectusClient(apiUrl, apiToken);
+}
+// ============================================================================
+// TOOL DEFINITIONS
+// ============================================================================
+// Define collections enum for reuse
+const collectionsEnum = z.enum([
+    "scans",
+    "vulnerabilities",
+    "secrets",
+    "github_repo_config",
+    "organisations",
+]);
+// --- Schema Discovery Tool ---
+server.registerTool("get_collection_schema", {
+    description: `Get the complete schema (fields, types, and relations) for any Directus collection.
+Use this FIRST if you don't know what fields are available.
+
+Available collections:
+- 'scans': Security scan records
+- 'vulnerabilities': Detected vulnerabilities (43 fields)
+- 'secrets': Detected secrets
+- 'github_repo_config': Repository configurations
+- 'organisations': Organization data`,
+    inputSchema: z.object({
+        collection: collectionsEnum.describe("The collection to get schema for"),
+    }),
+}, async ({ collection }) => {
+    try {
+        const client = getClient();
+        const schema = await client.getCollectionSchema(collection);
+        return {
+            content: [{ type: "text", text: JSON.stringify(schema, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// --- The Powerhouse Tool: queryCollection ---
+server.registerTool("query_collection", {
+    description: `THE POWERHOUSE TOOL - Generic query for ANY Directus collection with FULL capabilities.
+
+USE THIS FOR:
+- Listing data (scans, vulnerabilities, secrets, repos)
+- Getting counts (without fetching all data)
+- Filtering by any field or relation
+- Trend analysis & time-series data
+- Grouping & aggregations
+- Complex multi-condition filters
+- Pagination
+
+AVAILABLE COLLECTIONS:
+- 'scans': Security scan data
+- 'vulnerabilities': Vulnerability findings
+- 'secrets': Exposed secrets
+- 'github_repo_config': Repository configurations
+- 'organisations': Organization data
+
+CRITICAL RULES:
+1. ALWAYS specify fields (collections have 40+ fields!)
+2. Use limit: -1 ONLY for aggregations (to count ALL records)
+3. Use limit: 10-100 for data queries
+4. Use orgId to filter by organization
+
+FILTER OPERATORS:
+- Equality: _eq, _neq, _in, _nin
+- Comparison: _gt, _gte, _lt, _lte
+- Text: _contains, _icontains, _starts_with, _ends_with
+- Null: _null, _nnull, _empty, _nempty
+- Logical: _and, _or
+- Relations: _some, _none
+
+DYNAMIC DATES (use in filters):
+- Last 7 days: { "date_created": { "_gte": "$NOW(-7 days)" } }
+- Last month: { "date_created": { "_gte": "$NOW(-1 month)" } }
+
+AGGREGATIONS:
+- count: Count records (use "*" or specific field)
+- avg, sum, min, max: Numeric operations
+- groupBy: Group results (e.g., ["severity", "vuln_status"])
+
+EXAMPLES:
+// List critical vulnerabilities
+{ collection: "vulnerabilities", filter: { severity: { _eq: "Critical" } }, fields: ["id", "type", "file"], limit: 50 }
+
+// Count by severity
+{ collection: "vulnerabilities", aggregate: { count: "*" }, groupBy: ["severity"], limit: -1 }
+
+// Recent scans for a repo
+{ collection: "scans", filter: { repo_config: { name: { _eq: "my-repo" } } }, fields: ["id", "scan_type", "date_created"], limit: 10 }`,
+    inputSchema: z.object({
+        collection: collectionsEnum.describe("The collection to query"),
+        filter: z
+            .record(z.any())
+            .optional()
+            .describe('Directus filter object. Supports nested relations. Example: {"severity": {"_eq": "Critical"}, "scan": {"scan_type": {"_eq": "sast"}}}'),
+        aggregate: z
+            .object({
+            count: z.union([z.string(), z.array(z.string())]).optional(),
+            avg: z.array(z.string()).optional(),
+            sum: z.array(z.string()).optional(),
+            min: z.array(z.string()).optional(),
+            max: z.array(z.string()).optional(),
+            countDistinct: z.array(z.string()).optional(),
+        })
+            .optional()
+            .describe("Aggregation functions"),
+        groupBy: z
+            .array(z.string())
+            .optional()
+            .describe('Fields to group by (e.g., ["severity", "vuln_status"])'),
+        sort: z
+            .array(z.string())
+            .optional()
+            .describe('Sort fields (prefix with - for descending, e.g., ["-date_created"])'),
+        limit: z
+            .number()
+            .optional()
+            .describe("Max results. Use -1 for aggregations to count ALL records, 10-100 for data queries"),
+        offset: z.number().optional().describe("Records to skip (for pagination)"),
+        fields: z
+            .array(z.string())
+            .optional()
+            .describe('Fields to return. Use dot notation for relations: ["id", "scan.repo_config.name"]'),
+        deep: z
+            .record(z.any())
+            .optional()
+            .describe("Deep query parameters for nested relations"),
+        orgId: z
+            .string()
+            .optional()
+            .describe("Organization ID to filter by (auto-applied to queries)"),
+    }),
+}, async ({ collection, filter, aggregate, groupBy, sort, limit, offset, fields, deep, orgId, }) => {
+    try {
+        const client = getClient();
+        const result = await client.queryCollection({
+            collection,
+            filter,
+            aggregate,
+            groupBy,
+            sort,
+            limit,
+            offset,
+            fields,
+            deep,
+            orgId,
+        });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// --- Convenience Tools ---
+server.registerTool("get_scan_details", {
+    description: `Get detailed information about a specific scan including all vulnerabilities, secrets, and related data.
+Use this when you need the FULL scan record with all relations.`,
+    inputSchema: z.object({
+        scanId: z.string().describe("The scan ID"),
+    }),
+}, async ({ scanId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getScanById(scanId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_vulnerability_details", {
+    description: `Get detailed information about a specific vulnerability including code context, source, sink, data flow, and recommendations.
+Use this when you need the FULL vulnerability record.`,
+    inputSchema: z.object({
+        vulnerabilityId: z.string().describe("The vulnerability ID"),
+    }),
+}, async ({ vulnerabilityId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getVulnerabilityById(vulnerabilityId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_repo_config_details", {
+    description: `Get detailed repository configuration including all related scans, vulnerabilities, and secrets.
+Use this when you need the FULL repository record with all relations.`,
+    inputSchema: z.object({
+        repoId: z.string().describe("The repository configuration ID"),
+    }),
+}, async ({ repoId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getRepoConfigById(repoId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_organization", {
+    description: `Get organization details including name and quota.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("The organization ID"),
+    }),
+}, async ({ orgId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getOrganization(orgId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// ============================================================================
+// SERVER STARTUP
+// ============================================================================
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("NoHack Security MCP Server running on stdio");
+}
+main().catch((error) => {
+    console.error("Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,cAAc;IACV,MAAM,CAAS;IACf,KAAK,CAAS;IAEtB,YAAY,MAAc,EAAE,KAAa;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAqB;QACzD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,GAAG,OAAO,EAAE,OAAO;aACpB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAEjC,6DAA6D;QAC7D,MAAM,cAAc,GAAG,MAAM;aAC1B,MAAM,CACL,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM;YACf,CAAC;gBACC,MAAM;gBACN,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,cAAc;aACf,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CACtB;aACA,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE;YAClB,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,EAAE,iBAAiB;gBAC/B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACpC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEvC,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,UAAU,IAAI;oBAChB,QAAQ,EACN,KAAK,CAAC,IAAI,EAAE,kBAAkB,IAAI,KAAK,CAAC,MAAM,EAAE,iBAAiB;oBACnE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CACpD,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAClC;iBACF,CAAC;aACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAErE,OAAO;YACL,UAAU;YACV,WAAW,EAAE,cAAc,CAAC,MAAM;YAClC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;YAC/D,SAAS,EAAE,cAAc,CAAC,GAAG,CAC3B,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,YAAY,GAAG,CAC7D;SACF,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,OAkBrB;QACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,IAAI,EACJ,KAAK,EACL,MAAM,EACN,MAAM,EACN,IAAI,EACJ,KAAK,GACN,GAAG,OAAO,CAAC;QAEZ,8CAA8C;QAC9C,MAAM,cAAc,GAAwB;YAC1C,KAAK,EAAE;gBACL,WAAW,EAAE;oBACX,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;iBAC7B;aACF;YACD,eAAe,EAAE;gBACf,IAAI,EAAE;oBACJ,WAAW,EAAE;wBACX,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;qBAC7B;iBACF;aACF;YACD,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,WAAW,EAAE;wBACX,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;qBAC7B;iBACF;aACF;YACD,kBAAkB,EAAE;gBAClB,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;aAC7B;YACD,aAAa,EAAE;gBACb,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;aACnB;SACF,CAAC;QAEF,yDAAyD;QACzD,IAAI,cAAc,GAAG,MAAM,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,SAAS,EAAE,CAAC;gBACd,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,kBAAkB;QAClB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAC3C,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;gBAC5B,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,KAAK,CAAC,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,WAAW;QACX,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,YAAY;QACZ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,mDAAmD;QACnD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,OAAO,CAAC,KAA4B,CAAC,CAAC,OAAO,CAClD,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;wBACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,OAAO,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC5D,CAAC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE7E,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAE7B,gFAAgF;QAChF,iFAAiF;QACjF,IAAI,OAAO,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CACJ,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;gBACjD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,sCAAsC;aACxE,CAAC;YAEF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACxC,MAAM,WAAW,GAAG;wBAClB,GAAG,IAAI,GAAG,CACR,IAAI,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACxD;qBACF,CAAC;oBAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAS;oBAEvC,MAAM,kBAAkB,GACtB,QAAQ,KAAK,aAAa;wBACxB,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,QAAQ,KAAK,MAAM;4BACnB,CAAC,CAAC,OAAO;4BACT,CAAC,CAAC,QAAQ,KAAK,SAAS;gCACtB,CAAC,CAAC,UAAU;gCACZ,CAAC,CAAC,QAAQ,CAAC;oBAEnB,MAAM,SAAS,GAAG,cAAc;yBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;yBAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;oBAEhD,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;oBAC7C,cAAc,CAAC,GAAG,CAChB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAC7C,CAAC;oBACF,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;oBACjE,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBACxC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAElC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CACrC,UAAU,kBAAkB,IAAI,cAAc,CAAC,QAAQ,EAAE,EAAE,CAC5D,CAAC;oBACF,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CACxD,CAAC;oBAEF,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;wBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAClC,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACpD,IAAI,eAAe,EAAE,CAAC;4BACpB,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;wBAClD,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;YACxD,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,gBAAgB,MAAM,iFAAiF;YACrG,yEAAyE;YACzE,kGAAkG,CACrG,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,6BAA6B,MAAM,4DAA4D;YAC7F,qEAAqE;YACrE,yEAAyE;YACzE,mCAAmC,CACtC,CAAC;QACF,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC5B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,wBAAwB,KAAK,uBAAuB,CACrD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,+IAA+I;CAClJ,CAAC,CAAC;AAEH,yCAAyC;AACzC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAE9C,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,oCAAoC;AACpC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,OAAO;IACP,iBAAiB;IACjB,SAAS;IACT,oBAAoB;IACpB,eAAe;CAChB,CAAC,CAAC;AAEH,gCAAgC;AAEhC,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;IACE,WAAW,EAAE;;;;;;;;qCAQoB;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KACzE,CAAC;CACH,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,+CAA+C;AAE/C,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uIAiDsH;IACnI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC/D,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACf,QAAQ,EAAE;aACV,QAAQ,CACP,uIAAuI,CACxI;QACH,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC5D,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9C,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,uBAAuB,CAAC;QACpC,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,IAAI,EAAE,CAAC;aACJ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,oFAAoF,CACrF;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC1E,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,mFAAmF,CACpF;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACf,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;QACzD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;KACtE,CAAC;CACH,EACD,KAAK,EAAE,EACL,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,IAAI,EACJ,KAAK,EACL,MAAM,EACN,MAAM,EACN,IAAI,EACJ,KAAK,GACN,EAAE,EAAE;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC1C,UAAU;YACV,MAAM;YACN,SAAS;YACT,OAAO;YACP,IAAI;YACJ,KAAK;YACL,MAAM;YACN,MAAM;YACN,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,4BAA4B;AAE5B,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;gEAC+C;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;KAC3C,CAAC;CACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;IACE,WAAW,EAAE;sDACqC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KAC7D,CAAC;CACH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;IACE,WAAW,EAAE;sEACqD;IAClE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAC/D,CAAC;CACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE,oDAAoD;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAClD,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAC/D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@nohacklabs/mcp-server",
+  "version": "1.0.0",
+  "description": "MCP server for NoHack security scanning API - query vulnerabilities, secrets, scans, and repo configs",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "nohack-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsc --watch",
+    "prepublishOnly": "npm run build",
+    "inspector": "npx @anthropic-ai/mcp-inspector node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.11.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.0",
+    "typescript": "^5.7.3"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "security",
+    "vulnerability",
+    "sast",
+    "scanning",
+    "nohack",
+    "ai",
+    "cursor",
+    "claude"
+  ],
+  "author": "NoHack Labs",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nohacklabs/mcp-server"
+  },
+  "homepage": "https://nohacklabs.com",
+  "publishConfig": {
+    "access": "public"
+  }
+}