@rad-security/mcp-server 0.0.2

package/README.md

@@ -0,0 +1,151 @@
+# RAD Security MCP Server
+
+A Model Context Protocol (MCP) server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments.
+
+## Installation
+
+```bash
+npm install @rad-security/mcp-server
+```
+
+## Usage
+
+### Environment Variables
+
+The following environment variables are required:
+
+```bash
+RAD_SECURITY_ACCESS_KEY_ID=your_access_key
+RAD_SECURITY_SECRET_KEY=your_secret_key
+RAD_SECURITY_ACCOUNT_ID=your_account_id
+```
+
+### In cursor IDE
+
+It's quite problematic to set ENV variables in cursor IDE.
+
+So, you can use the following start.sh script to start the server.
+
+```bash
+./start.sh
+```
+
+Please set the ENV variables in the start.sh script first!
+
+### In Claude Desktop
+
+You can use the following config to start the server in Claude Desktop.
+
+```json
+{
+  "mcpServers": {
+    "rad-security": {
+      "command": "npx",
+      "args": ["@rad-security/mcp-server"],
+      "env": {
+        "RAD_SECURITY_ACCESS_KEY_ID": "<your-access-key-id>",
+        "RAD_SECURITY_SECRET_KEY": "<your-secret-key>",
+        "RAD_SECURITY_ACCOUNT_ID": "<your-account-id>"
+      }
+    }
+  }
+```
+
+### As a CLI Tool
+
+```bash
+npx @rad-security/mcp-server
+```
+
+### As a Library
+
+```typescript
+import { newServer } from '@rad-security/mcp-server';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+
+async function main() {
+  const transport = new StdioServerTransport();
+  const server = await newServer();
+  await server.connect(transport);
+}
+
+main().catch(console.error);
+```
+
+### As a Docker Container - with SSE
+
+```bash
+docker build -t rad-security/mcp-server .
+docker run \
+  -e TRANSPORT_TYPE=sse \
+  -e RAD_SECURITY_ACCESS_KEY_ID=your_access_key \
+  -e RAD_SECURITY_SECRET_KEY=your_secret_key \
+  -e RAD_SECURITY_ACCOUNT_ID=your_account_id \
+  -p 3000:3000 \
+  rad-security/mcp-server
+```
+
+## Features
+
+- Account Inventory
+  - List clusters and their details
+
+- Containers Inventory
+  - List containers and their details
+
+- Security Findings
+  - List and analyze security findings
+
+- Runtime Security
+  - Get process trees of running containers
+  - Get runtime baselines of running containers
+  - Analyze process behavior of running containers
+
+- Network Security
+  - Monitor HTTP requests
+  - Track network connections
+  - Analyze network patterns
+
+- Identity and Access
+  - List identities
+  - Get identity details
+
+- Audit
+  - List who shelled into a pod
+
+- Cloud Security
+  - List and monitor cloud resources
+  - Get resource details and compliance status
+
+- Images
+  - Get SBOMs
+  - List images and their vulnerabilities
+  - Get top vulnerable images
+
+- Kubernetes Objects
+  - Get details of a specific Kubernetes resource
+  - List Kubernetes resources
+
+- Threat Vector
+  - List threat vectors
+  - Get details of a specific threat vector
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Run type checking
+npm run type-check
+
+# Run linter
+npm run lint
+
+# Build
+npm run build
+```
+
+## License
+
+MIT License - see the [LICENSE](LICENSE) file for details

package/dist/client.d.ts

@@ -0,0 +1,21 @@
+type RequestOptions = {
+    method?: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+};
+export declare class RadSecurityClient {
+    private accessKeyId;
+    private secretKey;
+    private baseUrl;
+    private accountId;
+    private tokenCache;
+    constructor(accessKeyId: string, secretKey: string, baseUrl: string, accountId: string);
+    static fromEnv(): RadSecurityClient;
+    private isTokenValid;
+    getBaseUrl(): string;
+    getAccountId(): string;
+    private getToken;
+    makeRequest(endpoint: string, params?: Record<string, any>, options?: RequestOptions): Promise<any>;
+    private parseResponseBody;
+}
+export {};

package/dist/client.js

@@ -0,0 +1,102 @@
+const USER_AGENT = `rad-security/mcp-server`;
+export class RadSecurityClient {
+    accessKeyId;
+    secretKey;
+    baseUrl;
+    accountId;
+    tokenCache = null;
+    constructor(accessKeyId, secretKey, baseUrl, accountId) {
+        this.accessKeyId = accessKeyId;
+        this.secretKey = secretKey;
+        this.baseUrl = baseUrl;
+        this.accountId = accountId;
+    }
+    static fromEnv() {
+        const accessKeyId = process.env.RAD_SECURITY_ACCESS_KEY_ID;
+        const secretKey = process.env.RAD_SECURITY_SECRET_KEY;
+        const accountId = process.env.RAD_SECURITY_ACCOUNT_ID;
+        const baseUrl = process.env.RAD_SECURITY_API_URL || "https://api.rad.security";
+        if (!accessKeyId || !secretKey || !accountId) {
+            throw new Error("RAD_SECURITY_ACCESS_KEY_ID, RAD_SECURITY_SECRET_KEY, and RAD_SECURITY_ACCOUNT_ID must be set");
+        }
+        return new RadSecurityClient(accessKeyId, secretKey, baseUrl, accountId);
+    }
+    isTokenValid() {
+        if (!this.tokenCache) {
+            return false;
+        }
+        return new Date() < this.tokenCache.expiry;
+    }
+    getBaseUrl() {
+        return this.baseUrl;
+    }
+    getAccountId() {
+        return this.accountId;
+    }
+    async getToken() {
+        if (this.isTokenValid()) {
+            return this.tokenCache.token;
+        }
+        try {
+            const response = await fetch(`${this.baseUrl}/authentication/authenticate`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    access_key_id: this.accessKeyId,
+                    secret_key: this.secretKey,
+                }),
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP error! status: ${response.status}`);
+            }
+            const tokenData = await response.json();
+            // Cache token with 5 min buffer before expiry (assuming 4 hour token validity)
+            const expiry = new Date();
+            expiry.setMinutes(expiry.getMinutes() + 235); // 3h 55m
+            this.tokenCache = {
+                token: tokenData.token,
+                expiry,
+            };
+            return this.tokenCache.token;
+        }
+        catch (error) {
+            throw new Error(`Error getting authentication token: ${error}`);
+        }
+    }
+    async makeRequest(endpoint, params = {}, options = {}) {
+        const headers = {
+            "Content-Type": "application/json",
+            "User-Agent": USER_AGENT,
+            Authorization: `Bearer ${await this.getToken()}`,
+            ...options.headers,
+        };
+        const url = new URL(`${this.getBaseUrl()}${endpoint}`);
+        if (params) {
+            Object.entries(params).forEach(([key, value]) => {
+                if (value !== undefined) {
+                    url.searchParams.append(key, String(value));
+                }
+            });
+        }
+        const response = await fetch(url, {
+            method: options.method || "GET",
+            headers,
+            body: options.body ? JSON.stringify(options.body) : undefined,
+        });
+        const responseBody = await this.parseResponseBody(response);
+        if (!response.ok) {
+            throw new Error(`HTTP error! status: ${response.status} error: ${JSON.stringify(responseBody, null, 2)}`);
+        }
+        return responseBody;
+    }
+    async parseResponseBody(response) {
+        const contentType = response.headers.get("content-type");
+        if (contentType?.includes("application/json")) {
+            return response.json();
+        }
+        return response.text();
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAQ7C,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,UAAU,GAA2C,IAAI,CAAC;IAElE,YACE,WAAmB,EACnB,SAAiB,EACjB,OAAe,EACf,SAAiB;QAEjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,OAAO;QACZ,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACtD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;QAEjE,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,UAAW,CAAC,KAAK,CAAC;QAChC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,OAAO,8BAA8B,EAC7C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,aAAa,EAAE,IAAI,CAAC,WAAW;oBAC/B,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC3B,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuB,CAAC;YAE7D,+EAA+E;YAC/E,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;YAEvD,IAAI,CAAC,UAAU,GAAG;gBAChB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,MAAM;aACP,CAAC;YAEF,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,SAA8B,EAAE,EAChC,UAA0B,EAAE;QAE5B,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE;YAChD,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAEvD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,WAAW,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,QAAkB;QAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};