@rad-security/mcp-server 0.0.2

package/dist/operations/kubeobject.js

@@ -0,0 +1,38 @@
+import { z } from "zod";
+export const GetKubernetesResourceDetailsSchema = z.object({
+    cluster_id: z.string().describe("ID of the Kubernetes cluster"),
+    resource_uid: z.string().describe("Resource UID to get the details for"),
+});
+export const ListKubernetesResourcesSchema = z.object({
+    namespace: z.string().optional().describe("Namespace to filter resources"),
+    kinds: z.array(z.string()).optional().describe("List of kinds to filter. Example: ['Deployment', 'ServiceAccount', 'Pod']"),
+    cluster_id: z.string().optional().describe("Cluster ID to filter resources"),
+    page: z.number().optional().default(1).describe("Page number for pagination"),
+    page_size: z.number().optional().default(20).describe("Number of items per page"),
+});
+export async function getKubernetesResourceDetails(client, clusterId, resourceUid) {
+    const details = await client.makeRequest(`/clusters/${clusterId}/resources/${resourceUid}/latest`);
+    if (!details) {
+        throw new Error(`No details found for resource_uid: ${resourceUid} in cluster: ${clusterId}`);
+    }
+    // Decode the base64 raw manifest
+    if (details.raw) {
+        details.raw = Buffer.from(details.raw, 'base64').toString('utf-8');
+    }
+    return details;
+}
+export async function listKubernetesResources(client, kinds, namespace, clusterId, page = 1, pageSize = 20) {
+    const params = {
+        page,
+        page_size: pageSize,
+        resource_types: kinds?.join(',')
+    };
+    if (namespace) {
+        params.namespace = namespace;
+    }
+    if (clusterId) {
+        params.cluster_id = clusterId;
+    }
+    return client.makeRequest(`/accounts/${client.getAccountId()}/resources`, params);
+}
+//# sourceMappingURL=kubeobject.js.map

package/dist/operations/kubeobject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubeobject.js","sourceRoot":"","sources":["../../src/operations/kubeobject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;IAC3H,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CACtC,aAAa,SAAS,cAAc,WAAW,SAAS,CACzD,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,WAAW,gBAAgB,SAAS,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAyB,EACzB,KAA2B,EAC3B,SAAkB,EAClB,SAAkB,EAClB,OAAe,CAAC,EAChB,WAAmB,EAAE;IAErB,MAAM,MAAM,GAAwB;QAClC,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;KACjC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,aAAa,MAAM,CAAC,YAAY,EAAE,YAAY,EAC9C,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/operations/misconfigs.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { RadSecurityClient } from "../client.js";
+export declare const ListKubernetesResourceMisconfigurationsSchema: z.ZodObject<{
+    resource_uid: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    resource_uid: string;
+}, {
+    resource_uid: string;
+}>;
+export declare const GetKubernetesResourceMisconfigurationDetailsSchema: z.ZodObject<{
+    cluster_id: z.ZodString;
+    misconfig_id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    cluster_id: string;
+    misconfig_id: string;
+}, {
+    cluster_id: string;
+    misconfig_id: string;
+}>;
+export declare function listKubernetesResourceMisconfigurations(client: RadSecurityClient, resourceUid: string): Promise<any>;
+export declare function getKubernetesResourceMisconfigurationDetails(client: RadSecurityClient, clusterId: string, misconfigId: string): Promise<any>;

package/dist/operations/misconfigs.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+export const ListKubernetesResourceMisconfigurationsSchema = z.object({
+    resource_uid: z.string().describe("Kubernetes resource UID to get misconfigurations for"),
+});
+export const GetKubernetesResourceMisconfigurationDetailsSchema = z.object({
+    cluster_id: z.string().describe("ID of the cluster to get misconfiguration for"),
+    misconfig_id: z.string().describe("ID of the misconfiguration to get details for"),
+});
+export async function listKubernetesResourceMisconfigurations(client, resourceUid) {
+    const misconfigs = await client.makeRequest(`/accounts/${client.getAccountId()}/misconfig`, { kubeobject_uids: resourceUid, page_size: 50 });
+    // deduplicate the list based on field "guard_policy.human_id"
+    const seenIds = new Set();
+    const toReturn = [];
+    for (const misconfig of misconfigs.entries) {
+        const humanId = misconfig.guard_policy.human_id;
+        if (!seenIds.has(humanId)) {
+            seenIds.add(humanId);
+            toReturn.push({
+                id: misconfig.id,
+                cluster_id: misconfig.cluster_id,
+                title: misconfig.guard_policy.title,
+                human_id: misconfig.guard_policy.human_id,
+            });
+        }
+    }
+    misconfigs.entries = toReturn;
+    return misconfigs;
+}
+export async function getKubernetesResourceMisconfigurationDetails(client, clusterId, misconfigId) {
+    const response = await client.makeRequest(`/accounts/${client.getAccountId()}/clusters/${clusterId}/misconfig/${misconfigId}`);
+    if (!response) {
+        throw new Error(`No misconfiguration found with ID: ${misconfigId}`);
+    }
+    return response;
+}
+//# sourceMappingURL=misconfigs.js.map

package/dist/operations/misconfigs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"misconfigs.js","sourceRoot":"","sources":["../../src/operations/misconfigs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IACpE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kDAAkD,GAAG,CAAC,CAAC,MAAM,CAAC;IACzE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,MAAyB,EACzB,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CACzC,aAAa,MAAM,CAAC,YAAY,EAAE,YAAY,EAC9C,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,CAChD,CAAC;IAEF,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,EAAE,CAAC;IAEpB,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,KAAK;gBACnC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,QAAQ;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,MAAyB,EACzB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CACvC,aAAa,MAAM,CAAC,YAAY,EAAE,aAAa,SAAS,cAAc,WAAW,EAAE,CACpF,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/operations/runtime.d.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+import { RadSecurityClient } from "../client.js";
+export declare const GetContainersProcessTreesSchema: z.ZodObject<{
+    container_ids: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    container_ids: string[];
+}, {
+    container_ids: string[];
+}>;
+export declare const GetContainersBaselinesSchema: z.ZodObject<{
+    container_ids: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    container_ids: string[];
+}, {
+    container_ids: string[];
+}>;
+export declare const GetContainerLLMAnalysisSchema: z.ZodObject<{
+    container_id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    container_id: string;
+}, {
+    container_id: string;
+}>;
+export declare function getContainersBaselines(client: RadSecurityClient, containerIds: string[]): Promise<any>;
+export declare function getContainersProcessTrees(client: RadSecurityClient, containerIds: string[]): Promise<any>;
+export declare function getContainerLLMAnalysis(client: RadSecurityClient, containerId: string): Promise<any>;

package/dist/operations/runtime.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+export const GetContainersProcessTreesSchema = z.object({
+    container_ids: z.array(z.string()).describe("List of container IDs to get process trees for"),
+});
+export const GetContainersBaselinesSchema = z.object({
+    container_ids: z.array(z.string()).describe("List of container IDs to get baselines for"),
+});
+export const GetContainerLLMAnalysisSchema = z.object({
+    container_id: z.string().describe("Container ID to get LLM analysis for"),
+});
+export async function getContainersBaselines(client, containerIds) {
+    if (containerIds.length === 0) {
+        throw new Error("No container IDs provided");
+    }
+    // Convert list to comma-separated string for API request
+    const containerIdsParam = containerIds.join(',');
+    // Get container runtime insights for all containers
+    const cris = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights`, { container_ids: containerIdsParam });
+    if (!cris.entries) {
+        throw new Error(`No process trees found for container_ids: ${containerIds}`);
+    }
+    // Map to store results
+    const baselines = {};
+    // Process each container runtime insight
+    for (const entry of cris.entries) {
+        const criId = entry.id;
+        const containerId = entry.summary?.container_meta?.container_id;
+        if (!containerId || !containerIds.includes(containerId)) {
+            continue;
+        }
+        // Get detailed data for this container
+        const data = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights/${criId}`);
+        if (data.baseline) {
+            baselines[containerId] = data.baseline;
+        }
+        else {
+            // Just log a warning instead of raising an error to allow partial results
+            console.warn(`No baseline found for container_id: ${containerId}`);
+        }
+    }
+    if (Object.keys(baselines).length === 0) {
+        throw new Error(`No baselines found for any of the container_ids: ${containerIds}`);
+    }
+    return baselines;
+}
+export async function getContainersProcessTrees(client, containerIds) {
+    if (containerIds.length === 0) {
+        throw new Error("No container IDs provided");
+    }
+    const cris = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights`, { container_ids: containerIds.join(',') });
+    const containersProcessTrees = {};
+    for (const cri of cris.entries) {
+        const criId = cri.id;
+        const data = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights/${criId}`);
+        if (!data.ongoing || !data.ongoing.containers || data.ongoing.containers.length === 0) {
+            containersProcessTrees[criId] = {};
+        }
+        else {
+            containersProcessTrees[criId] = data.ongoing.containers[0];
+        }
+    }
+    return containersProcessTrees;
+}
+export async function getContainerLLMAnalysis(client, containerId) {
+    const cris = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights`, { container_id: containerId });
+    return cris.entries[0].analysis;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/operations/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/operations/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CAC9F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAyB,EACzB,YAAsB;IAEtB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,yDAAyD;IACzD,MAAM,iBAAiB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjD,oDAAoD;IACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CACnC,aAAa,MAAM,CAAC,YAAY,EAAE,6BAA6B,EAC/D,EAAE,aAAa,EAAE,iBAAiB,EAAE,CACrC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAE1C,yCAAyC;IACzC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC;QAEhE,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,SAAS;QACX,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CACnC,aAAa,MAAM,CAAC,YAAY,EAAE,+BAA+B,KAAK,EAAE,CACzE,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,0EAA0E;YAC1E,OAAO,CAAC,IAAI,CAAC,uCAAuC,WAAW,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,YAAY,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAyB,EACzB,YAAsB;IAEtB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CACnC,aAAa,MAAM,CAAC,YAAY,EAAE,6BAA6B,EAC/D,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC1C,CAAC;IAEF,MAAM,sBAAsB,GAAwB,EAAE,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CACnC,aAAa,MAAM,CAAC,YAAY,EAAE,+BAA+B,KAAK,EAAE,CACzE,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtF,sBAAsB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,sBAAsB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAyB,EACzB,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CACnC,aAAa,MAAM,CAAC,YAAY,EAAE,6BAA6B,EAC/D,EAAE,YAAY,EAAE,WAAW,EAAE,CAC9B,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClC,CAAC"}

package/dist/operations/runtime_network.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+import { RadSecurityClient } from "../client.js";
+export declare const listHttpRequestsSchema: z.ZodObject<{
+    filters: z.ZodOptional<z.ZodString>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    q: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    filters?: string | undefined;
+    offset?: number | undefined;
+    q?: string | undefined;
+}, {
+    filters?: string | undefined;
+    offset?: number | undefined;
+    limit?: number | undefined;
+    q?: string | undefined;
+}>;
+export declare const listNetworkConnectionsSchema: z.ZodObject<{
+    filters: z.ZodOptional<z.ZodString>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    q: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    filters?: string | undefined;
+    offset?: number | undefined;
+    q?: string | undefined;
+}, {
+    filters?: string | undefined;
+    offset?: number | undefined;
+    limit?: number | undefined;
+    q?: string | undefined;
+}>;
+export declare const listNetworkConnectionSourcesSchema: z.ZodObject<{
+    filters: z.ZodOptional<z.ZodString>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    q: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    filters?: string | undefined;
+    offset?: number | undefined;
+    q?: string | undefined;
+}, {
+    filters?: string | undefined;
+    offset?: number | undefined;
+    limit?: number | undefined;
+    q?: string | undefined;
+}>;
+export declare function listHttpRequests(client: RadSecurityClient, params: z.infer<typeof listHttpRequestsSchema>): Promise<any>;
+export declare function listNetworkConnections(client: RadSecurityClient, params: z.infer<typeof listNetworkConnectionsSchema>): Promise<any>;
+export declare function listNetworkConnectionSources(client: RadSecurityClient, params: z.infer<typeof listNetworkConnectionSourcesSchema>): Promise<any>;

package/dist/operations/runtime_network.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+// Input schemas
+export const listHttpRequestsSchema = z.object({
+    filters: z.string().optional().describe("Filter string for filtering results. Filter options: method, path," +
+        "scheme, source_workload_name, source_workload_namespace, destination_workload_name, destination_workload_namespace," +
+        "has_pii. Example: 'method:GET,path:/api/v1/users,scheme:https,source_workload_name:my-workload,source_workload_namespace:my-namespace,destination_workload_name:my-workload,destination_workload_namespace:my-namespace,has_pii:true'"),
+    offset: z.number().optional().describe("Offset to start the list from"),
+    limit: z.number().optional().default(20).describe("Limit the number of items in the list"),
+    q: z.string().optional().describe("Query to filter the list of HTTP requests"),
+});
+export const listNetworkConnectionsSchema = z.object({
+    filters: z.string().optional().describe("Filter string for filtering results." +
+        "Example: 'resource_type:EC2NetworkInterface,resource_type:SQSQueue,aws_account:123456789012,compliance:not_compliant'"),
+    offset: z.number().optional().describe("Offset to start the list from"),
+    limit: z.number().optional().default(20).describe("Limit the number of items in the list"),
+    q: z.string().optional().describe("Query to filter the list of network connections"),
+});
+export const listNetworkConnectionSourcesSchema = z.object({
+    filters: z.string().optional().describe("Filter string for filtering results." +
+        "Filter options: source_workload_name, source_workload_namespace, destination_workload_name, destination_workload_namespace" +
+        "Example: 'source_workload_name:my-workload,destination_workload_name:my-workload'"),
+    offset: z.number().optional().describe("Offset to start the list from"),
+    limit: z.number().optional().default(20).describe("Limit the number of items in the list"),
+    q: z.string().optional().describe("Query to filter the list of network connection sources"),
+});
+export async function listHttpRequests(client, params) {
+    const validatedParams = listHttpRequestsSchema.parse(params);
+    const response = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights/http_requests`, validatedParams);
+    return response;
+}
+export async function listNetworkConnections(client, params) {
+    const validatedParams = listNetworkConnectionsSchema.parse(params);
+    const response = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights/network_connections`, validatedParams);
+    return response;
+}
+export async function listNetworkConnectionSources(client, params) {
+    const validatedParams = listNetworkConnectionSourcesSchema.parse(params);
+    const response = await client.makeRequest(`/accounts/${client.getAccountId()}/container_runtime_insights/network_connection_sources`, validatedParams);
+    return response;
+}
+//# sourceMappingURL=runtime_network.js.map

package/dist/operations/runtime_network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime_network.js","sourceRoot":"","sources":["../../src/operations/runtime_network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,gBAAgB;AAChB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE;QAC1G,qHAAqH;QACrH,uOAAuO,CAAC;IAC1O,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC1F,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC;QACxE,uHAAuH,CAAC;IAC9H,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC1F,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACrF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC;QAC5E,4HAA4H;QAC5H,mFAAmF,CAAC;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC1F,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;CAC5F,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,MAA8C;IAE9C,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CACvC,aAAa,MAAM,CAAC,YAAY,EAAE,2CAA2C,EAC7E,eAAe,CAChB,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAyB,EACzB,MAAoD;IAEpD,MAAM,eAAe,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CACvC,aAAa,MAAM,CAAC,YAAY,EAAE,iDAAiD,EACnF,eAAe,CAChB,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAyB,EACzB,MAA0D;IAE1D,MAAM,eAAe,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CACvC,aAAa,MAAM,CAAC,YAAY,EAAE,wDAAwD,EAC1F,eAAe,CAChB,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/operations/threats.d.ts

@@ -0,0 +1,22 @@
+import { z } from "zod";
+import { RadSecurityClient } from "../client.js";
+export declare const listThreatVectorsSchema: z.ZodObject<{
+    clustersIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    namespaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    resource_uid: z.ZodOptional<z.ZodString>;
+    page: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    page_size: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    page: number;
+    page_size: number;
+    resource_uid?: string | undefined;
+    clustersIds?: string[] | undefined;
+    namespaces?: string[] | undefined;
+}, {
+    page?: number | undefined;
+    page_size?: number | undefined;
+    resource_uid?: string | undefined;
+    clustersIds?: string[] | undefined;
+    namespaces?: string[] | undefined;
+}>;
+export declare function listThreatVectors(client: RadSecurityClient, clustersIds: string[] | undefined, namespaces: string[] | undefined, resourceUid: string | undefined, page?: number, pageSize?: number): Promise<any>;

package/dist/operations/threats.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+// Input schemas
+export const listThreatVectorsSchema = z.object({
+    clustersIds: z.array(z.string()).optional().describe("Cluster ids to check for threat vectors"),
+    namespaces: z.array(z.string()).optional().describe("Namespaces to check for threat vectors"),
+    resource_uid: z.string().optional().describe("Threat vector associated with this resource"),
+    page: z.number().optional().default(1).describe("Page number to retrieve"),
+    page_size: z.number().optional().default(20).describe("Number of items per page"),
+});
+// Main functions
+export async function listThreatVectors(client, clustersIds, namespaces, resourceUid, page = 1, pageSize = 20) {
+    const params = {
+        associated_with_resource_uid: resourceUid,
+        clusters: clustersIds,
+        namespaces: namespaces,
+        statuses: "Open",
+        page_size: pageSize,
+        page: page,
+    };
+    const response = await client.makeRequest(`/accounts/${client.getAccountId()}/threat_vector_instances/v2`, params);
+    // Return the transformed response
+    return response;
+}
+//# sourceMappingURL=threats.js.map

package/dist/operations/threats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threats.js","sourceRoot":"","sources":["../../src/operations/threats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,gBAAgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC7F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAClF,CAAC,CAAC;AAEH,iBAAiB;AACjB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAyB,EACzB,WAAiC,EACjC,UAAgC,EAChC,WAA+B,EAC/B,OAAe,CAAC,EAChB,WAAmB,EAAE;IAErB,MAAM,MAAM,GAAG;QACb,4BAA4B,EAAE,WAAW;QACzC,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;KACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CACvC,aAAa,MAAM,CAAC,YAAY,EAAE,6BAA6B,EAC/D,MAAM,CACP,CAAC;IAEF,kCAAkC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const VERSION = "0.0.2";

package/dist/version.js

@@ -0,0 +1,2 @@
+export const VERSION = "0.0.2";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@rad-security/mcp-server",
+  "version": "0.0.2",
+  "description": "RAD Security MCP Server for AI-powered security insights",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "mcp-server": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && shx chmod +x dist/*.js",
+    "type-check": "tsc --noEmit",
+    "lint": "npx eslint src --ext .ts",
+    "lint:fix": "npx eslint src --ext .ts --fix",
+    "prepare": "npm run build",
+    "prepublishOnly": "npm run lint",
+    "start": "node dist/index.js",
+    "watch": "tsc --watch"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rad-security/mcp-server.git"
+  },
+  "keywords": [
+    "security",
+    "kubernetes",
+    "cloud",
+    "mcp",
+    "rad-security"
+  ],
+  "author": "RAD Security",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/rad-security/mcp-server/issues"
+  },
+  "homepage": "https://github.com/rad-security/mcp-server#readme",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.6.1",
+    "express": "^4.18.2",
+    "cors": "^2.8.5"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "@types/express": "^4.17.21",
+    "@types/cors": "^2.8.17",
+    "@typescript-eslint/eslint-plugin": "^8.29.0",
+    "@typescript-eslint/parser": "^8.29.0",
+    "eslint": "^9.15.0",
+    "shx": "^0.3.4",
+    "typescript": "^5.6.2"
+  }
+}