curatedmcp 2.0.0

package/dist/cli.js

@@ -0,0 +1,132 @@
+/**
+ * CLI dispatcher.
+ *
+ * `npx @curatedmcp/launcher` (no args) → MCP server mode (handled in index.ts)
+ * `npx @curatedmcp/launcher <subcommand>` → run that subcommand and exit
+ */
+import { createRequire } from "module";
+import { addToStack, parseEnvFlags } from "./cli/add.js";
+import { removeFromStack } from "./cli/remove.js";
+import { listStack } from "./cli/list.js";
+import { runInit } from "./cli/init.js";
+import { runAuditCommand } from "./cli/audit.js";
+import { runGuardCommand } from "./cli/guard.js";
+import { runLogin } from "./cli/login.js";
+import { runSync } from "./cli/sync.js";
+const require = createRequire(import.meta.url);
+// Read version from package.json so it never drifts from the published version.
+const VERSION = require("../package.json").version;
+const HELP = `
+curatedmcp v${VERSION}
+The CuratedMCP agent — discover, run, audit, and govern every MCP server your AI tools use.
+
+USAGE
+  npx curatedmcp [SUBCOMMAND] [OPTIONS]
+
+SUBCOMMANDS
+  (no subcommand)        Run as an MCP hub server over stdio (used by AI clients).
+  audit                  Scan this machine for MCP servers and flag security risks.
+  add <slug>             Add a server from the CuratedMCP catalog to your stack.
+  remove <slug>          Remove a server from your stack.
+  list                   List the servers currently in your stack.
+  guard -- <cmd>         Run the action firewall in front of a downstream MCP server.
+  login [token]          Sign in to your CuratedMCP account (enables sync & alerts).
+  sync [--team <slug>]   Pull your team's MCP allow-list and report a local audit.
+  init                   Show the one-line config snippet to add the agent to your AI client.
+  --version, -v          Print version and exit.
+  --help, -h             Print this help.
+
+EXAMPLES
+  npx curatedmcp audit
+  npx curatedmcp add github --env GITHUB_TOKEN=ghp_xxx
+  npx curatedmcp guard -- npx -y @modelcontextprotocol/server-filesystem /tmp
+  npx curatedmcp login
+  npx curatedmcp sync
+
+CONFIG
+  Stack lives at ~/.curatedmcp/stack.json (hand-editable JSON).
+  Auth token at ~/.curatedmcp/auth.json. Set CURATOR_API_URL to override the API base
+  (default: https://www.curatedmcp.com).
+
+LEARN MORE
+  https://curatedmcp.com/launcher
+`.trim();
+/**
+ * True if argv contains a CLI subcommand or top-level flag.
+ * False means run as an MCP server (the default mode used by AI clients).
+ *
+ * NOTE: We deliberately exclude `--no-telemetry` here because Telemetry
+ * already handles that flag in MCP server mode.
+ */
+export function isCliInvocation(argv) {
+    const args = argv.slice(2);
+    if (args.length === 0)
+        return false;
+    // First non-flag arg is the subcommand
+    const first = args[0];
+    const SUBCOMMANDS = new Set([
+        "add",
+        "remove",
+        "list",
+        "init",
+        "audit",
+        "guard",
+        "login",
+        "sync",
+        "--help",
+        "-h",
+        "--version",
+        "-v",
+    ]);
+    return SUBCOMMANDS.has(first);
+}
+export async function runCli(argv) {
+    const args = argv.slice(2);
+    const [cmd, ...rest] = args;
+    switch (cmd) {
+        case "--version":
+        case "-v":
+            console.log(VERSION);
+            return 0;
+        case "--help":
+        case "-h":
+            console.log(HELP);
+            return 0;
+        case "init":
+            return runInit();
+        case "audit":
+            return runAuditCommand(rest);
+        case "guard":
+            return runGuardCommand(rest);
+        case "login":
+            return runLogin(rest);
+        case "sync":
+            return runSync(rest);
+        case "list":
+            return listStack();
+        case "add": {
+            const slug = rest.find((a) => !a.startsWith("-"));
+            if (!slug) {
+                console.error("Usage: launcher add <slug> [--env KEY=value ...]");
+                return 1;
+            }
+            const env = parseEnvFlags(rest);
+            const result = await addToStack(slug, { env, nonInteractive: false });
+            console.log(result.summary);
+            return 0;
+        }
+        case "remove": {
+            const slug = rest.find((a) => !a.startsWith("-"));
+            if (!slug) {
+                console.error("Usage: launcher remove <slug>");
+                return 1;
+            }
+            return removeFromStack(slug);
+        }
+        default:
+            console.error(`Unknown subcommand: ${cmd}\n`);
+            console.error(HELP);
+            return 1;
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/guard/broker.d.ts

@@ -0,0 +1,62 @@
+export interface BrokerConfig {
+    registryUrl: string;
+    registryKey: string;
+    registrySlug: string;
+}
+export interface VerifyResult {
+    allowed: boolean;
+    agentIdentityId?: string;
+    jitTokenId?: string;
+    scopes?: string[];
+    reason?: string;
+}
+/**
+ * CuratedBroker — thin HTTP client that connects Sentinel to the
+ * curatedmcp.com identity and audit layer.
+ *
+ * Configure via env vars:
+ *   CURATED_REGISTRY_URL   (default: https://curatedmcp.com)
+ *   CURATED_REGISTRY_KEY   required — cmcp_reg_... API key from dashboard
+ *   CURATED_REGISTRY_SLUG  required — your org slug
+ */
+export declare class CuratedBroker {
+    private baseUrl;
+    private key;
+    private slug;
+    private agentIdentityId;
+    private jitTokens;
+    constructor(config: BrokerConfig);
+    static fromEnv(): CuratedBroker | null;
+    private url;
+    private headers;
+    /** Stable fingerprint derived from machine-level entropy stored in ~/.sentinel */
+    static machineFingerprint(): string;
+    /**
+     * Register this Sentinel instance with the org's registry.
+     * Idempotent — safe to call on every startup.
+     */
+    register(name?: string): Promise<string | null>;
+    /**
+     * Issue a JIT token scoped to a specific MCP server.
+     * Tokens are cached in-memory for their lifetime.
+     */
+    getJitToken(serverSlug: string): Promise<string | null>;
+    /**
+     * Verify a JIT token before executing a tool call.
+     * Returns { allowed: true } if the call should proceed.
+     */
+    verify(token: string, serverSlug: string, toolName: string): Promise<VerifyResult>;
+    /**
+     * Log a completed tool invocation. Fire-and-forget: errors are swallowed.
+     */
+    logInvocation(opts: {
+        serverSlug: string;
+        toolName: string;
+        args: Record<string, unknown>;
+        outcome: "ALLOWED" | "BLOCKED" | "RATE_LIMITED" | "ERROR";
+        blockReason?: string;
+        latencyMs?: number;
+        jitTokenId?: string;
+    }): void;
+}
+//# sourceMappingURL=broker.d.ts.map

package/dist/guard/broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.d.ts","sourceRoot":"","sources":["../../src/guard/broker.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,SAAS,CAA2D;gBAEhE,MAAM,EAAE,YAAY;IAMhC,MAAM,CAAC,OAAO,IAAI,aAAa,GAAG,IAAI;IAWtC,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,OAAO;IAOf,kFAAkF;IAClF,MAAM,CAAC,kBAAkB,IAAI,MAAM;IAKnC;;;OAGG;IACG,QAAQ,CAAC,IAAI,SAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoBzD;;;OAGG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA6B7D;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAexF;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,cAAc,GAAG,OAAO,CAAC;QAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,IAAI;CAoBT"}

package/dist/guard/broker.js

@@ -0,0 +1,147 @@
+import { createHash } from "crypto";
+/**
+ * CuratedBroker — thin HTTP client that connects Sentinel to the
+ * curatedmcp.com identity and audit layer.
+ *
+ * Configure via env vars:
+ *   CURATED_REGISTRY_URL   (default: https://curatedmcp.com)
+ *   CURATED_REGISTRY_KEY   required — cmcp_reg_... API key from dashboard
+ *   CURATED_REGISTRY_SLUG  required — your org slug
+ */
+export class CuratedBroker {
+    constructor(config) {
+        this.agentIdentityId = null;
+        this.jitTokens = new Map();
+        this.baseUrl = config.registryUrl.replace(/\/$/, "");
+        this.key = config.registryKey;
+        this.slug = config.registrySlug;
+    }
+    static fromEnv() {
+        const key = process.env.CURATED_REGISTRY_KEY;
+        const slug = process.env.CURATED_REGISTRY_SLUG;
+        if (!key || !slug)
+            return null;
+        return new CuratedBroker({
+            registryUrl: process.env.CURATED_REGISTRY_URL ?? "https://curatedmcp.com",
+            registryKey: key,
+            registrySlug: slug,
+        });
+    }
+    url(path) {
+        return `${this.baseUrl}/api/v1/registry/${this.slug}${path}`;
+    }
+    headers() {
+        return {
+            Authorization: `Bearer ${this.key}`,
+            "Content-Type": "application/json",
+        };
+    }
+    /** Stable fingerprint derived from machine-level entropy stored in ~/.sentinel */
+    static machineFingerprint() {
+        const machineId = process.env.CURATED_MACHINE_ID ?? `${process.platform}-${process.arch}`;
+        return createHash("sha256").update(machineId).digest("hex");
+    }
+    /**
+     * Register this Sentinel instance with the org's registry.
+     * Idempotent — safe to call on every startup.
+     */
+    async register(name = "Sentinel") {
+        try {
+            const res = await fetch(this.url("/identity"), {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify({
+                    fingerprint: CuratedBroker.machineFingerprint(),
+                    name,
+                    description: `Sentinel v${process.env.npm_package_version ?? "0.x"} on ${process.platform}`,
+                }),
+            });
+            if (!res.ok)
+                return null;
+            const data = (await res.json());
+            this.agentIdentityId = data.identity?.id ?? null;
+            return this.agentIdentityId;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Issue a JIT token scoped to a specific MCP server.
+     * Tokens are cached in-memory for their lifetime.
+     */
+    async getJitToken(serverSlug) {
+        const cached = this.jitTokens.get(serverSlug);
+        if (cached && cached.expiresAt > Date.now() + 60000)
+            return cached.token;
+        if (!this.agentIdentityId)
+            return null;
+        try {
+            const res = await fetch(this.url("/jit-token"), {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify({
+                    agentIdentityId: this.agentIdentityId,
+                    serverSlug,
+                    scopes: [],
+                }),
+            });
+            if (!res.ok)
+                return null;
+            const data = (await res.json());
+            if (!data.token)
+                return null;
+            this.jitTokens.set(serverSlug, {
+                token: data.token,
+                expiresAt: data.expiresAt ? new Date(data.expiresAt).getTime() : Date.now() + 3600000,
+            });
+            return data.token;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Verify a JIT token before executing a tool call.
+     * Returns { allowed: true } if the call should proceed.
+     */
+    async verify(token, serverSlug, toolName) {
+        try {
+            const res = await fetch(this.url("/jit-token/verify"), {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify({ token, serverSlug, toolName }),
+            });
+            if (!res.ok)
+                return { allowed: false, reason: "broker_error" };
+            return (await res.json());
+        }
+        catch {
+            // Fail open when broker is unreachable — local policy still applies
+            return { allowed: true, reason: "broker_unreachable" };
+        }
+    }
+    /**
+     * Log a completed tool invocation. Fire-and-forget: errors are swallowed.
+     */
+    logInvocation(opts) {
+        const argsHash = createHash("sha256")
+            .update(JSON.stringify(opts.args))
+            .digest("hex");
+        fetch(this.url("/tool-invocations"), {
+            method: "POST",
+            headers: this.headers(),
+            body: JSON.stringify({
+                agentIdentityId: this.agentIdentityId,
+                jitTokenId: opts.jitTokenId,
+                serverSlug: opts.serverSlug,
+                toolName: opts.toolName,
+                argsHash,
+                outcome: opts.outcome,
+                blockReason: opts.blockReason,
+                latencyMs: opts.latencyMs,
+            }),
+        }).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=broker.js.map

package/dist/guard/dashboard.d.ts

@@ -0,0 +1,14 @@
+import { ActionLogger } from "./logger.js";
+import { PolicyEngine } from "./policy.js";
+export declare class Dashboard {
+    private app;
+    private actionLogger;
+    private policyEngine;
+    private port;
+    constructor(actionLogger: ActionLogger, policyEngine: PolicyEngine, port?: number);
+    private setupRoutes;
+    private getDashboardData;
+    private renderHTML;
+    start(): Promise<void>;
+}
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/guard/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/guard/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAO3C,qBAAa,SAAS;IACpB,OAAO,CAAC,GAAG,CAA2B;IACtC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,IAAI,CAAS;gBAGnB,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,IAAI,GAAE,MAAa;IAOrB,OAAO,CAAC,WAAW;IA0CnB,OAAO,CAAC,gBAAgB;IAoBxB,OAAO,CAAC,UAAU;IAsWZ,KAAK;CAUZ"}