arl-next-mcp 1.0.0

package/README.md

@@ -0,0 +1,36 @@
+# ARL-Next MCP Server
+
+这是 [ARL-Next](https://github.com/owl234/ARL-Next) 的官方 MCP (Model Context Protocol) 服务代理。
+
+该模块作为一个中间代理，允许 AI 助手（如 Cursor, Claude Desktop 等）安全地通过你的本地环境与远端的 ARL-Next 服务进行交互，**无需在公网服务端暴露额外端口**。
+
+## 🚀 快速接入
+
+**完全无需本地安装！** 只需在你的 AI 客户端（如 Cursor 或 Claude）的 MCP 配置文件中添加以下内容：
+
+```json
+{
+  "mcpServers": {
+    "ARL-Next": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "@arl-next/mcp"
+      ],
+      "env": {
+        "ARL_HOST": "https://你的服务器IP",
+        "ARL_TOKEN": "你的API_TOKEN"
+      }
+    }
+  }
+}
+```
+3. **重启加载**：
+   保存文件后，重启您的 Antigravity IDE 即可。当您在侧边栏或代码助手对话时，就可以直接让它去“搜索 ARL 最新资产”了。
+
+## 🛠️ 当前支持的 Tools
+
+1. `search_assets`：从资产库中智能查询资产（支持 `site`, `ip`, `domain`, `cert`, `service` 类型）。
+2. `get_tasks`：获取最近的扫描任务状态。
+
+更多自动化漏洞分析和下发任务功能持续更新中...

package/index.js

@@ -0,0 +1,183 @@
+#!/usr/bin/env node
+
+const { Server } = require("@modelcontextprotocol/sdk/server/index.js");
+const { StdioServerTransport } = require("@modelcontextprotocol/sdk/server/stdio.js");
+const {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} = require("@modelcontextprotocol/sdk/types.js");
+const axios = require("axios");
+const { program } = require("commander");
+
+program
+  .name("arl-mcp")
+  .description("MCP Server for ARL-Next")
+  .option("--host <host>", "ARL-Next server host URL (e.g. https://1.1.1.1:5173)")
+  .option("--token <token>", "ARL-Next API token")
+  .parse(process.argv);
+
+const options = program.opts();
+const host = options.host || process.env.ARL_HOST;
+const token = options.token || process.env.ARL_TOKEN;
+
+if (!host || !token) {
+  console.error("Error: --host and --token are required. Provide them via CLI or environment variables (ARL_HOST, ARL_TOKEN).");
+  process.exit(1);
+}
+
+const https = require("https");
+
+const apiClient = axios.create({
+  baseURL: `${host}/api`,
+  headers: {
+    "Token": token
+  },
+  timeout: 10000,
+  httpsAgent: new https.Agent({  
+    rejectUnauthorized: false
+  })
+});
+
+const server = new Server(
+  {
+    name: "arl-next-mcp",
+    version: "1.0.0",
+  },
+  {
+    capabilities: {
+      tools: {},
+    },
+  }
+);
+
+// Define tools
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [
+      {
+        name: "search_assets",
+        description: "Search for discovered assets (sites, IPs, domains) in ARL-Next.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            assetType: {
+              type: "string",
+              description: "Type of asset to search: 'site', 'ip', 'domain', 'cert', 'service'",
+              enum: ["site", "ip", "domain", "cert", "service"]
+            },
+            query: {
+              type: "string",
+              description: "Search keyword (e.g. 'nginx', '1.1.1.1', 'example.com')"
+            },
+            page: {
+              type: "number",
+              description: "Page number (default 1)"
+            },
+            size: {
+              type: "number",
+              description: "Page size (default 10, max 50 for safety)"
+            }
+          },
+          required: ["assetType"]
+        }
+      },
+      {
+        name: "get_tasks",
+        description: "Get recent scanning tasks and their status.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            page: { type: "number", description: "Page number (default 1)" },
+            size: { type: "number", description: "Page size (default 10)" }
+          }
+        }
+      }
+    ],
+  };
+});
+
+// Handle tool execution
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  if (request.params.name === "search_assets") {
+    const { assetType, query, page = 1, size = 10 } = request.params.arguments;
+    
+    // Security Fix: Validate assetType to prevent path traversal
+    const allowedAssets = ["site", "ip", "domain", "cert", "service"];
+    if (!allowedAssets.includes(assetType)) {
+      return {
+        content: [{ type: "text", text: `Error: Invalid assetType '${assetType}'` }],
+        isError: true
+      };
+    }
+
+    const safeSize = Math.min(size, 50); // Enforce max 50 to prevent OOM
+    
+    try {
+      const response = await apiClient.get(`/${assetType}/`, {
+        params: {
+          page: page,
+          size: safeSize,
+          query: query
+        }
+      });
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(response.data, null, 2)
+          }
+        ]
+      };
+    } catch (error) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `API Request Failed: ${error.message}\n${error.response?.data ? JSON.stringify(error.response.data) : ''}`
+          }
+        ],
+        isError: true
+      };
+    }
+  }
+
+  if (request.params.name === "get_tasks") {
+    const { page = 1, size = 10 } = request.params.arguments;
+    try {
+      const response = await apiClient.get(`/task/`, {
+        params: { page, size }
+      });
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(response.data, null, 2)
+          }
+        ]
+      };
+    } catch (error) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `API Request Failed: ${error.message}\n${error.response?.data ? JSON.stringify(error.response.data) : ''}`
+          }
+        ],
+        isError: true
+      };
+    }
+  }
+
+  throw new Error("Unknown tool");
+});
+
+async function run() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error("ARL-Next MCP Server running on stdio");
+}
+
+run().catch((error) => {
+  console.error("Fatal error running MCP server:", error);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "arl-next-mcp",
+  "version": "1.0.0",
+  "description": "ARL-Next MCP Server",
+  "main": "index.js",
+  "bin": {
+    "arl-next-mcp": "index.js"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "mcp",
+    "arl-next",
+    "security"
+  ],
+  "author": "ARL-Next",
+  "license": "ISC",
+  "type": "commonjs",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "axios": "^1.18.1",
+    "commander": "^15.0.0"
+  }
+}