@rad-security/mcp-server 0.0.27 → 0.0.31-2.g635c655

package/README.md

@@ -1,5 +1,7 @@
 # RAD Security MCP Server
 
+[![npm version](https://img.shields.io/npm/v/@rad-security/mcp-server)](https://npmjs.com/package/@rad-security/mcp-server)
+
 A Model Context Protocol (MCP) server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments.
 
 <a href="https://glama.ai/mcp/servers/@rad-security/mcp-server">
@@ -44,21 +46,20 @@ You can control which toolkits are exposed by the MCP server using these environ
 Available toolkits:
 - `containers` - Container inventory operations
 - `clusters` - Kubernetes cluster operations
-- `identities` - Identity management operations
 - `audit` - Audit log operations
-- `cloud_inventory` - Cloud resource inventory
-- `images` - Container image operations
+- `images` - Container image, vulnerability and CVE disposition operations
 - `kubeobject` - Kubernetes resource operations
-- `misconfigs` - Misconfiguration detection
 - `runtime` - Runtime analysis operations
-- `runtime_network` - Network traffic analysis
-- `threats` - Threat vector operations
 - `findings` - Security findings operations
-- `cves` - CVE database operations
 - `inbox` - Inbox item operations
 - `workflows` - Workflow execution operations
+- `custom_workflows` - Workflow authoring operations (disabled by default)
 - `knowledge_base` - Knowledge base search operations
 - `radql` - Query interface for rad data platform
+- `dashboards` - Dashboard and widget template operations
+- `integrations` - External integration operations
+
+Note: `custom_workflows` is disabled by default and must be enabled explicitly via `INCLUDE_TOOLKITS`.
 
 Examples:
 
@@ -72,21 +73,12 @@ INCLUDE_TOOLKITS="containers,images"
 # Exclude workflow toolkit (enable all others)
 EXCLUDE_TOOLKITS="workflows"
 
-# Exclude runtime and threat toolkits
-EXCLUDE_TOOLKITS="runtime,threats"
+# Exclude runtime toolkit
+EXCLUDE_TOOLKITS="runtime"
 ```
 
 Note: If `INCLUDE_TOOLKITS` is set, `EXCLUDE_TOOLKITS` is ignored.
 
-#### Operations Without Authentication
-
-You can also use few operations without authentication:
-
-- List CVEs
-- Get details of a specific CVE
-- Get latest 30 CVEs
-- List Kubernetes resource misconfiguration policies
-
 ### In cursor IDE
 
 It's quite problematic to set ENV variables in cursor IDE.
@@ -180,64 +172,65 @@ docker run \
 
 ## Features
 
+All tools require authentication and an account in Rad Security.
+
 - Account Inventory
-  - List clusters and their details*
+  - List clusters and their details
 
 - Containers Inventory
-  - List containers and their details*
+  - List containers and their details
 
 - Security Findings
-  - List and analyze security findings*
+  - List and analyze security findings
+  - Update the status of a security finding
 
 - Runtime Security
-  - Get process trees of running containers*
-  - Get runtime baselines of running containers*
-  - Analyze process behavior of running containers*
+  - Get process trees of running containers
+  - Get runtime baselines of running containers
+  - Analyze process behavior of running containers
 
-- Network Security
-  - Monitor HTTP requests*
-  - Track network connections*
-  - Analyze network patterns*
+- Audit
+  - List who shelled into a pod
 
-- Identity and Access
-  - List identities*
-  - Get identity details*
+- Images and Vulnerabilities
+  - Get SBOMs
+  - List images and their vulnerabilities
+  - Get top vulnerable images
+  - Ignore / unignore CVEs and list active CVE dispositions
 
-- Audit
-  - List who shelled into a pod*
+- Kubernetes Objects
+  - Get details of a specific Kubernetes resource
+  - List Kubernetes resources
 
-- Cloud Security
-  - List and monitor cloud resources*
-  - Get resource details and compliance status*
+- Inbox
+  - List inbox items and their details
+  - Mark an inbox item as a false positive
 
-- Images
-  - Get SBOMs*
-  - List images and their vulnerabilities*
-  - Get top vulnerable images*
+- Workflows
+  - List workflows, runs and schedules
+  - Get workflow and workflow run details
+  - Run a workflow
+  - Create and update custom workflows and schedules (via `custom_workflows`, disabled by default)
 
-- Kubernetes Objects
-  - Get details of a specific Kubernetes resource*
-  - List Kubernetes resources*
-  - List Kubernetes resource misconfiguration policies*
+- Knowledge Base
+  - Search the knowledge base
+  - List collections and documents
+  - Run structured queries against a document
 
-- Threat Vector
-  - List threat vectors*
-  - Get details of a specific threat vector*
+- Dashboards
+  - List dashboards and get their details
+  - List and get dashboard and widget templates
 
-- CVEs
-  - List CVEs
-  - Get details of a specific CVE
-  - Get latest 30 CVEs
+- Integrations
+  - List external integrations
 
 - RadQL (Advanced Querying)
-  - List available data types for querying (containers, findings, kubernetes_resources, etc.)*
-  - Get schema/metadata for specific data types*
-  - List possible values for filter fields*
-  - Execute RadQL queries with filtering, searching, and aggregations*
-  - Build queries programmatically from structured conditions*
-  - Execute multiple queries in parallel*
-
-`*` - requires authentication and account in Rad Security.
+  - List available data types for querying (containers, findings, kubernetes_resources, etc.)
+  - Get schema/metadata for specific data types
+  - List possible values for filter fields
+  - Execute RadQL queries with filtering, searching, and aggregations
+  - Build queries programmatically from structured conditions
+  - Execute multiple queries in parallel
 
 ## Development
 
@@ -257,4 +250,4 @@ npm run build
 
 ## License
 
-MIT License - see the [LICENSE](LICENSE) file for details
+MIT License - see the [LICENSE](LICENSE) file for details