@weave_protocol/mund 0.1.5 → 0.1.7

package/.mcpregistry_github_token

@@ -0,0 +1 @@
+ghu_wNyHeK04LwpkkeMZHtUHzBrRFUU6k80WOTOj

package/.mcpregistry_registry_token

@@ -0,0 +1 @@
+{"token":"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJtY3AtcmVnaXN0cnkiLCJleHAiOjE3NzE0NTM3MzgsIm5iZiI6MTc3MTQ1MzQzOCwiaWF0IjoxNzcxNDUzNDM4LCJhdXRoX21ldGhvZCI6ImdpdGh1Yi1hdCIsImF1dGhfbWV0aG9kX3N1YiI6IlR5b3gtYWxsIiwicGVybWlzc2lvbnMiOlt7ImFjdGlvbiI6InB1Ymxpc2giLCJyZXNvdXJjZSI6ImlvLmdpdGh1Yi5UeW94LWFsbC8qIn1dfQ.qZJh92M9l0TiI6OabJraIbFm0c4iMox6T0LeyOf2-IQsv0AqJreJ33or0GAL5hi9R0VtXc2j6SHvA1BMVz17Dg","expires_at":1771453738}

package/LICENSE

@@ -1,3 +1,11 @@
+The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.
+
+Contributions for which relicensing consent has been obtained are licensed under Apache-2.0. Contributions made by authors who originally licensed their work under the MIT License and who have not yet granted explicit permission to relicense remain licensed under the MIT License.
+
+No rights beyond those granted by the applicable original license are conveyed for such contributions.
+
+---
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -48,9 +56,9 @@
       "Contribution" shall mean any work of authorship, including
       the original version of the Work and any modifications or additions
       to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
+      submitted to the Licensor for inclusion in the Work by the copyright
+      owner or by an individual or Legal Entity authorized to submit on behalf
+      of the copyright owner. For the purposes of this definition, "submitted"
       means any form of electronic, verbal, or written communication sent
       to the Licensor or its representatives, including but not limited to
       communication on electronic mailing lists, source code control systems,
@@ -175,27 +183,34 @@
 
    END OF TERMS AND CONDITIONS
 
-   APPENDIX: How to apply the Apache License to your work.
+---
+
+MIT License
+
+Copyright (c) 2024-2025 Model Context Protocol a Series of LF Projects, LLC.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
-   Copyright 2025 Weave Protocol
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
 
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
+---
 
-       http://www.apache.org/licenses/LICENSE-2.0
+Creative Commons Attribution 4.0 International (CC-BY-4.0)
 
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+Documentation in this project (excluding specifications) is licensed under
+CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
+the full license text.

package/README.md

@@ -1,135 +1,153 @@
-# Mund - The Guardian Protocol
+# MCP Registry
 
-**Pattern Detection & Threat Scanning for AI Agents**
+The MCP registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.
 
-Part of the [Weave Protocol Security Suite](https://github.com/Tyox-all/Weave_Protocol) (Mund + Hord + Dōmere)
+[**📤 Publish my MCP server**](docs/modelcontextprotocol-io/quickstart.mdx) | [**⚡️ Live API docs**](https://registry.modelcontextprotocol.io/docs) | [**👀 Ecosystem vision**](docs/design/ecosystem-vision.md) | 📖 **[Full documentation](./docs)**
 
-## What It Does
+## Development Status
 
-Mund scans AI agent inputs and outputs for security threats before they cause harm:
+**2025-10-24 update**: The Registry API has entered an **API freeze (v0.1)** 🎉. For the next month or more, the API will remain stable with no breaking changes, allowing integrators to confidently implement support. This freeze applies to v0.1 while development continues on v0. We'll use this period to validate the API in real-world integrations and gather feedback to shape v1 for general availability. Thank you to everyone for your contributions and patience—your involvement has been key to getting us here!
 
-- **Secret Detection** - API keys, tokens, passwords, certificates
-- **PII Detection** - SSN, credit cards, emails, phone numbers
-- **Injection Detection** - Prompt injection, jailbreak attempts
-- **Exfiltration Detection** - Data leakage patterns, encoding tricks
-- **Code Analysis** - Dangerous patterns, eval(), exec(), SQL injection
+**2025-09-08 update**: The registry has launched in preview 🎉 ([announcement blog post](https://blog.modelcontextprotocol.io/posts/2025-09-08-mcp-registry-preview/)). While the system is now more stable, this is still a preview release and breaking changes or data resets may occur. A general availability (GA) release will follow later. We'd love your feedback in [GitHub discussions](https://github.com/modelcontextprotocol/registry/discussions/new?category=ideas) or in the [#registry-dev Discord](https://discord.com/channels/1358869848138059966/1369487942862504016) ([joining details here](https://modelcontextprotocol.io/community/communication)).
 
-## Installation
+Current key maintainers:
+- **Adam Jones** (Anthropic) [@domdomegg](https://github.com/domdomegg)  
+- **Tadas Antanavicius** (PulseMCP) [@tadasant](https://github.com/tadasant)
+- **Toby Padilla** (GitHub) [@toby](https://github.com/toby)
+- **Radoslav (Rado) Dimitrov** (Stacklok) [@rdimitrov](https://github.com/rdimitrov)
+
+## Contributing
+
+We use multiple channels for collaboration - see [modelcontextprotocol.io/community/communication](https://modelcontextprotocol.io/community/communication).
+
+Often (but not always) ideas flow through this pipeline:
+
+- **[Discord](https://modelcontextprotocol.io/community/communication)** - Real-time community discussions
+- **[Discussions](https://github.com/modelcontextprotocol/registry/discussions)** - Propose and discuss product/technical requirements
+- **[Issues](https://github.com/modelcontextprotocol/registry/issues)** - Track well-scoped technical work  
+- **[Pull Requests](https://github.com/modelcontextprotocol/registry/pulls)** - Contribute work towards issues
+
+### Quick start:
+
+#### Pre-requisites
+
+- **Docker**
+- **Go 1.24.x**
+- **ko** - Container image builder for Go ([installation instructions](https://ko.build/install/))
+- **golangci-lint v2.4.0**
+
+#### Running the server
 
 ```bash
-npm install @weave_protocol/mund
+# Start full development environment
+make dev-compose
 ```
 
-## Quick Start
+This starts the registry at [`localhost:8080`](http://localhost:8080) with PostgreSQL. The database uses ephemeral storage and is reset each time you restart the containers, ensuring a clean state for development and testing.
 
-```typescript
-import { SecretScanner, PIIDetector, InjectionDetector } from '@weave_protocol/mund';
+**Note:** The registry uses [ko](https://ko.build) to build container images. The `make dev-compose` command automatically builds the registry image with ko and loads it into your local Docker daemon before starting the services.
 
-// Scan for secrets
-const secretScanner = new SecretScanner();
-const secretResults = secretScanner.analyze('My API key is sk-1234567890abcdef');
-// Returns: [{ type: 'secret', severity: 'critical', pattern: 'openai_api_key', ... }]
+By default, the registry seeds from the production API with a filtered subset of servers (to keep startup fast). This ensures your local environment mirrors production behavior and all seed data passes validation. For offline development you can seed from a file without validation with `MCP_REGISTRY_SEED_FROM=data/seed.json MCP_REGISTRY_ENABLE_REGISTRY_VALIDATION=false make dev-compose`.
 
-// Detect PII
-const piiDetector = new PIIDetector();
-const piiResults = piiDetector.analyze('Contact John at john@example.com or 555-123-4567');
-// Returns: [{ type: 'pii', matches: ['email', 'phone'], ... }]
+The setup can be configured with environment variables in [docker-compose.yml](./docker-compose.yml) - see [.env.example](./.env.example) for a reference.
 
-// Check for injection
-const injectionDetector = new InjectionDetector();
-const injectionResults = injectionDetector.analyze('Ignore previous instructions and...');
-// Returns: [{ type: 'injection', severity: 'high', ... }]
+<details>
+<summary>Alternative: Running a pre-built Docker image</summary>
+
+Pre-built Docker images are automatically published to GitHub Container Registry:
+
+```bash
+# Run latest stable release
+docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:latest
+
+# Run latest from main branch (continuous deployment)
+docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:main
+
+# Run specific release version
+docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:v1.0.0
+
+# Run development build from main branch
+docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:main-20250906-abc123d
 ```
 
-## MCP Tools
+**Available tags:** 
+- **Releases**: `latest`, `v1.0.0`, `v1.1.0`, etc.
+- **Continuous**: `main` (latest main branch build)
+- **Development**: `main-<date>-<sha>` (specific commit builds)
+
+</details>
 
-Run as MCP server for Claude Desktop:
+#### Publishing a server
 
-```json
-{
-  "mcpServers": {
-    "mund": {
-      "command": "npx",
-      "args": ["@weave_protocol/mund"]
-    }
-  }
-}
+To publish a server, we've built a simple CLI. You can use it with:
+
+```bash
+# Build the latest CLI
+make publisher
+
+# Use it!
+./bin/mcp-publisher --help
+```
+
+See [the publisher guide](./docs/modelcontextprotocol-io/quickstart.mdx) for more details.
+
+#### Other commands
+
+```bash
+# Run lint, unit tests and integration tests
+make check
 ```
 
-### Available Tools
-
-| Tool | Description |
-|------|-------------|
-| `mund_scan_content` | Full security scan on content |
-| `mund_scan_secrets` | Scan for secrets and credentials |
-| `mund_scan_pii` | Scan for personally identifiable information |
-| `mund_scan_injection` | Detect prompt injection attempts |
-| `mund_scan_exfiltration` | Detect data exfiltration patterns |
-| `mund_analyze_code` | Analyze code for security issues |
-| `mund_get_rules` | Get current detection rules |
-| `mund_add_rule` | Add custom detection rule |
-| `mund_enable_rule` | Enable a detection rule |
-| `mund_disable_rule` | Disable a detection rule |
-| `mund_get_stats` | Get scanning statistics |
-
-## Detection Patterns
-
-### Secrets (30+ patterns)
-- AWS keys, Azure keys, GCP credentials
-- OpenAI, Anthropic, Cohere API keys
-- GitHub, GitLab, Bitbucket tokens
-- Stripe, Twilio, SendGrid keys
-- JWT tokens, private keys, certificates
-
-### PII Patterns
-- Social Security Numbers
-- Credit card numbers (with Luhn validation)
-- Email addresses, phone numbers
-- Physical addresses, dates of birth
-
-### Injection Patterns
-- "Ignore previous instructions"
-- "You are now DAN"
-- Role manipulation attempts
-- Base64/hex encoded instructions
-- Unicode obfuscation
-
-## Integration with Hord & Dōmere
-
-```typescript
-// Full Weave Protocol security flow
-import { SecretScanner } from '@weave_protocol/mund';
-import { VaultManager } from '@weave_protocol/hord';
-import { ThreadManager } from '@weave_protocol/domere';
-
-// 1. Scan input with Mund
-const scanner = new SecretScanner();
-const threats = scanner.analyze(userInput);
-
-if (threats.length > 0) {
-  // 2. Contain with Hord
-  const vault = new VaultManager();
-  await vault.quarantine(threats);
-}
-
-// 3. Track with Dōmere
-const thread = new ThreadManager();
-await thread.addHop({
-  security_scan: threats,
-  // ...
-});
+There are also a few more helpful commands for development. Run `make help` to learn more, or look in [Makefile](./Makefile).
+
+<!--
+For Claude and other AI tools: Always prefer make targets over custom commands where possible.
+-->
+
+## Architecture
+
+### Project Structure
+
+```
+├── cmd/                     # Application entry points
+│   └── publisher/           # Server publishing tool
+├── data/                    # Seed data
+├── deploy/                  # Deployment configuration (Pulumi)
+├── docs/                    # Documentation
+├── internal/                # Private application code
+│   ├── api/                 # HTTP handlers and routing
+│   ├── auth/                # Authentication (GitHub OAuth, JWT, namespace blocking)
+│   ├── config/              # Configuration management
+│   ├── database/            # Data persistence (PostgreSQL)
+│   ├── service/             # Business logic
+│   ├── telemetry/           # Metrics and monitoring
+│   └── validators/          # Input validation
+├── pkg/                     # Public packages
+│   ├── api/                 # API types and structures
+│   │   └── v0/              # Version 0 API types
+│   └── model/               # Data models for server.json
+├── scripts/                 # Development and testing scripts
+├── tests/                   # Integration tests
+└── tools/                   # CLI tools and utilities
+    └── validate-*.sh        # Schema validation tools
 ```
 
-## License
+### Authentication
+
+Publishing supports multiple authentication methods:
+- **GitHub OAuth** - For publishing by logging into GitHub
+- **GitHub OIDC** - For publishing from GitHub Actions
+- **DNS verification** - For proving ownership of a domain and its subdomains
+- **HTTP verification** - For proving ownership of a domain
 
-Apache-2.0
+The registry validates namespace ownership when publishing. E.g. to publish...:
+- `io.github.domdomegg/my-cool-mcp` you must login to GitHub as `domdomegg`, or be in a GitHub Action on domdomegg's repos
+- `me.adamjones/my-cool-mcp` you must prove ownership of `adamjones.me` via DNS or HTTP challenge
 
-## Links
+## Community Projects
 
-- [GitHub](https://github.com/Tyox-all/Weave_Protocol)
-- [Hord (Vault Protocol)](https://www.npmjs.com/package/@weave_protocol/hord)
-- [Dōmere (Judge Protocol)](https://www.npmjs.com/package/@weave_protocol/domere)
+Check out [community projects](docs/community-projects.md) to explore notable registry-related work created by the community.
 
----
+## More documentation
 
-Made with ❤️ for AI Safety
+See the [documentation](./docs) for more details if your question has not been answered here!

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@weave_protocol/mund",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "The Guardian Protocol - MCP-based security monitoring for agentic AI systems",
   "main": "dist/index.js",
   "bin": {
@@ -38,13 +38,13 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "express": "^4.21.0",
-    "zod": "^3.23.8",
-    "yaml": "^2.5.0",
     "better-sqlite3": "^11.3.0",
+    "express": "^4.21.0",
     "nodemailer": "^6.9.15",
+    "uuid": "^10.0.0",
     "winston": "^3.14.2",
-    "uuid": "^10.0.0"
+    "yaml": "^2.5.0",
+    "zod": "^3.23.8"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.11",
@@ -52,11 +52,12 @@
     "@types/node": "^22.5.5",
     "@types/nodemailer": "^6.4.16",
     "@types/uuid": "^10.0.0",
-    "tsx": "^4.19.1",
-    "typescript": "^5.6.2",
-    "vitest": "^2.1.1",
     "@typescript-eslint/eslint-plugin": "^8.6.0",
     "@typescript-eslint/parser": "^8.6.0",
-    "eslint": "^9.10.0"
-  }
+    "eslint": "^9.10.0",
+    "tsx": "^4.19.1",
+    "typescript": "^5.6.2",
+    "vitest": "^2.1.1"
+  },
+  "mcpName": "io.github.Tyox-all/mund"
 }

package/server.json

@@ -0,0 +1,85 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.Tyox-all/mund",
+  "description": "AI security scanner - secrets, PII, prompt injection, and exfiltration detection.",
+  "repository": {
+    "url": "https://github.com/Tyox-all/Weave_Protocol",
+    "source": "github"
+  },
+  "version": "0.1.6",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "@weave_protocol/mund",
+      "version": "0.1.6",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "MUND_SEVERITY_THRESHOLD",
+          "description": "Minimum severity level to report (low, medium, high, critical)",
+          "isRequired": false,
+          "format": "string"
+        },
+        {
+          "name": "MUND_LOG_LEVEL",
+          "description": "Logging verbosity (debug, info, warn, error)",
+          "isRequired": false,
+          "format": "string"
+        }
+      ]
+    }
+  ],
+  "tools": [
+    {
+      "name": "mund_scan_content",
+      "description": "Full security scan on content for secrets, PII, injection, and exfiltration"
+    },
+    {
+      "name": "mund_scan_secrets",
+      "description": "Scan for API keys, tokens, passwords, and credentials (30+ patterns)"
+    },
+    {
+      "name": "mund_scan_pii",
+      "description": "Detect personally identifiable information (SSN, credit cards, email, phone)"
+    },
+    {
+      "name": "mund_scan_injection",
+      "description": "Detect prompt injection and jailbreak attempts"
+    },
+    {
+      "name": "mund_scan_exfiltration",
+      "description": "Detect data exfiltration patterns and encoding tricks"
+    },
+    {
+      "name": "mund_analyze_code",
+      "description": "Analyze code for security vulnerabilities (SQL injection, XSS, eval)"
+    },
+    {
+      "name": "mund_get_rules",
+      "description": "Get current detection rules and patterns"
+    },
+    {
+      "name": "mund_add_rule",
+      "description": "Add custom detection rule"
+    },
+    {
+      "name": "mund_get_stats",
+      "description": "Get scanning statistics"
+    }
+  ],
+  "categories": [
+    "security",
+    "developer-tools"
+  ],
+  "tags": [
+    "ai-security",
+    "secret-detection",
+    "pii-detection",
+    "prompt-injection",
+    "llm-security",
+    "agent-security",
+    "weave-protocol"
+  ]
+}