fullcourtdefense-cli 1.7.16 → 1.7.17

package/dist/commands/local-scan.js

@@ -1111,7 +1111,7 @@ function compactScanHtml(args) {
     .workflowCard { min-height: 118px; }
     .workflowCard b { font-size: 18px; }
     .workflowCard span { font-size: 13px; }
-    .landingScanGrid { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; }
+    .landingScanGrid { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 10px; }
     .scanTypeGrid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; margin: 12px 0; }
     .advancedScanGrid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; margin: 8px 0 12px; }
     .card:hover, .card.active { border-color: #2563eb; background: #eff6ff; transform: translateY(-1px); }
@@ -1203,6 +1203,7 @@ function compactScanHtml(args) {
             <button class="card workflowCard" data-workflow="bot"><b>Bot Scan</b><span>Red-team an internal bot, agent, or chat API.</span></button>
             <button class="card workflowCard" data-workflow="posture"><b>Security Posture Scan</b><span>Run web-style endpoint security checkup.</span></button>
             <button class="card workflowCard" data-workflow="mcp"><b>MCP Scan</b><span>Scan an MCP server or protected gateway for risky tool paths.</span></button>
+            <button class="card workflowCard" data-workflow="mcp-posture"><b>MCP Posture Scan</b><span>Inventory exposed MCP tools without invoking them.</span></button>
           </div>
         </div>
         <div class="menuGroup">
@@ -1281,6 +1282,7 @@ function compactScanHtml(args) {
         <div class="advancedScanGrid">
           <button class="card scanTypeCard" data-target="rag"><b>RAG Scan</b><span>Test retrieval URL or local corpus path.</span></button>
           <button class="card scanTypeCard" data-target="mcp"><b>MCP Scan</b><span>Scan tool responses and tool-abuse paths.</span></button>
+          <button class="card scanTypeCard" data-target="mcp-posture"><b>MCP Posture Scan</b><span>List tools and flag risky exposed capabilities.</span></button>
         </div>
       </div>
 
@@ -1329,6 +1331,7 @@ function compactScanHtml(args) {
       </div>
 
       <div id="mcp-fields" class="hidden">
+        <div class="note" id="mcpModeNote">MCP Scan runs red-team templates against MCP tool behavior. MCP Posture Scan lists exposed tools and flags risky capabilities without invoking them.</div>
         <div class="two">
           <div><label>MCP HTTP/SSE URL</label><input id="mcpUrl" placeholder="http://127.0.0.1:5066/mcp" /></div>
           <div><label>MCP tool</label><input id="mcpTool" value="all" /></div>
@@ -1414,19 +1417,25 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
     </section>
   </main>
   <script>
-    const scanTargets = ['endpoint','posture','rag','mcp'];
+    const scanTargets = ['endpoint','posture','rag','mcp','mcp-posture'];
     let target = 'home';
     let step = 1;
     const qs = new URLSearchParams(location.search);
-    if (['runner','endpoint','posture','rag','mcp','help'].includes(qs.get('target'))) target = qs.get('target');
+    if (['runner','endpoint','posture','rag','mcp','mcp-posture','help'].includes(qs.get('target'))) target = qs.get('target');
     const byId = id => document.getElementById(id);
     const workflow = () => target === 'endpoint' ? 'bot' : target === 'posture' ? 'posture' : target === 'home' ? '' : target;
     const sync = () => {
       document.querySelectorAll('.workflowCard').forEach(c => c.classList.toggle('active', c.dataset.workflow === workflow()));
       document.querySelectorAll('.scanTypeCard').forEach(c => c.classList.toggle('active', c.dataset.target === target));
       byId('workflowPanel').classList.toggle('hidden', target === 'home');
-      ['runner','endpoint','posture','rag','mcp','help'].forEach(id => byId(id + '-fields').classList.toggle('hidden', id !== target));
+      ['runner','endpoint','posture','rag','mcp','help'].forEach(id => {
+        const show = id === 'mcp' ? ['mcp','mcp-posture'].includes(target) : id === target;
+        byId(id + '-fields').classList.toggle('hidden', !show);
+      });
       const scanTarget = scanTargets.includes(target);
+      byId('mcpModeNote').textContent = target === 'mcp-posture'
+        ? 'MCP Posture Scan lists exposed tools, checks whether the server appears protected, and flags risky capabilities without invoking any tool.'
+        : 'MCP Scan runs red-team templates against MCP tool behavior. Use MCP Posture Scan for inventory-only posture.';
       byId('scan-picker').classList.toggle('hidden', !scanTarget);
       byId('scanSteps').classList.toggle('hidden', !scanTarget);
       byId('scanActions').classList.toggle('hidden', !scanTarget);
@@ -1434,12 +1443,16 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
         ? 'Run MCP Tool'
         : target === 'help'
           ? 'Local workflow options'
-          : 'Choose scan target';
+          : target === 'mcp-posture'
+            ? 'MCP posture scan'
+            : 'Choose scan target';
       byId('connectSubtitle').textContent = target === 'runner'
         ? 'Call one MCP tool from this machine. This is not a scan.'
         : target === 'help'
           ? 'Choose one-off tool run or local red-team scan.'
-          : 'Select Endpoint, RAG, or MCP, then connect the internal target.';
+          : target === 'mcp-posture'
+            ? 'Connect an MCP server or protected gateway. No tools are invoked.'
+            : 'Select Endpoint, RAG, or MCP, then connect the internal target.';
       if (!scanTarget || target === 'home') setStep(1);
     };
     const setStep = next => {
@@ -1512,6 +1525,7 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
       if (p.target === 'endpoint') parts.push('--endpoint', JSON.stringify(p.endpoint), '--method POST --request-format custom --input-field', p.inputField || 'message', '--output-field', p.outputField || 'response');
       if (p.target === 'posture') return 'Security Posture Scan runs through this local web UI and calls the Full Court Defense posture checkup API for ' + (p.postureUrl || '<endpoint-url>');
       if (p.target === 'rag') { if (p.ragUrl) parts.push('--rag-url', JSON.stringify(p.ragUrl), '--method POST --request-format custom --input-field', p.ragInputField || 'query', '--output-field', p.ragOutputField || 'chunks'); else parts.push('--rag-path', JSON.stringify(p.ragPath || '.\\\\docs')); }
+      if (p.target === 'mcp-posture') return 'MCP Posture Scan runs through this local web UI and inventories exposed tools for ' + (p.mcpUrl || ((p.mcpCommand || 'node') + ' ' + (p.mcpArgs || '.\\\\server.js')));
       if (p.target === 'mcp') { if (p.mcpUrl) parts.push('--mcp-url', JSON.stringify(p.mcpUrl)); else parts.push('--mcp-command', p.mcpCommand || 'node', '--mcp-args', JSON.stringify(p.mcpArgs || '.\\\\server.js')); parts.push('--mcp-tool', p.mcpTool || 'all'); }
       return parts.join(' ');
     };
@@ -1767,6 +1781,20 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
       byId('run').disabled = true;
       byId('run').textContent = 'Running...';
       clearScanSummary();
+      if (target === 'mcp-posture') {
+        try {
+          setConsole('Starting MCP Posture Scan...\\nNo MCP tools will be invoked; this only lists exposed tools.\\n', 'Running MCP posture');
+          const postureRes = await fetch('/mcp/posture', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(payload()) });
+          const postureData = await postureRes.json();
+          setConsole(JSON.stringify(postureData, null, 2), postureData.ok ? 'MCP posture complete' : 'MCP posture failed');
+        } catch (error) {
+          setConsole('MCP Posture Scan failed: ' + (error && error.message ? error.message : String(error)), 'MCP posture failed');
+        } finally {
+          byId('run').disabled = false;
+          byId('run').textContent = 'Run local scan';
+        }
+        return;
+      }
       const backendOk = await checkBackend();
       if (!backendOk) {
         setConsole('Outbound backend check failed. Fix backend connectivity before scanning so verdicts and reports can be generated.', 'Blocked');
@@ -2039,6 +2067,84 @@ async function runMcpToolFromBrowser(body) {
         client.close();
     }
 }
+function mcpPostureSignals(tool) {
+    const text = `${tool.name || ''} ${tool.description || ''} ${JSON.stringify(tool.inputSchema || {})}`.toLowerCase();
+    const checks = [
+        [/\b(delete|remove|destroy|drop|wipe|purge|erase)\b/, 'destructive operation'],
+        [/\b(write|update|create|insert|modify|patch|replace)\b/, 'write-capable operation'],
+        [/\b(exec|shell|command|process|spawn|powershell|bash|terminal)\b/, 'shell/command execution'],
+        [/\b(file|filesystem|path|readfile|writefile|directory|upload|download)\b/, 'file-system access'],
+        [/\b(secret|token|key|password|credential|env|private)\b/, 'secret/credential access'],
+        [/\b(payment|wire|transfer|invoice|billing|bank|account|iban)\b/, 'financial operation'],
+        [/\b(http|request|fetch|webhook|url|network|browser)\b/, 'network/browser access'],
+        [/\b(customer|user|email|phone|address|ssn|pii|record)\b/, 'customer/PII data access'],
+    ];
+    return checks.filter(([pattern]) => pattern.test(text)).map(([, label]) => label);
+}
+async function runMcpPostureScanFromBrowser(body) {
+    const rawUrl = typeof body.mcpUrl === 'string' ? body.mcpUrl.trim() : '';
+    const rawCommand = typeof body.mcpCommand === 'string' ? body.mcpCommand.trim() : '';
+    const rawArgs = typeof body.mcpArgs === 'string' ? body.mcpArgs.trim() : '';
+    if (!rawUrl && !rawCommand)
+        throw new Error('Provide either an MCP HTTP/SSE URL or stdio command.');
+    const transport = rawUrl
+        ? (/\/sse\/?$/.test(new URL(rawUrl).pathname) ? 'sse' : 'http')
+        : 'stdio';
+    const options = {
+        transport,
+        url: rawUrl || undefined,
+        command: rawCommand || undefined,
+        args: parseArgsList(rawArgs),
+        authType: 'none',
+        toolName: 'all',
+        toolArgs: {},
+    };
+    const destination = rawUrl || `${rawCommand} ${options.args?.join(' ') || ''}`.trim();
+    const protectedGatewayDetected = /fullcourtdefense|agentguard|fcd|5066|gateway|proxy/i.test(destination);
+    const client = createMcpClient(options);
+    const startedAt = Date.now();
+    try {
+        await client.initialize();
+        const tools = await client.listTools();
+        const toolFindings = tools.map(tool => {
+            const signals = mcpPostureSignals(tool);
+            return {
+                name: tool.name,
+                description: tool.description || '',
+                risk: signals.length >= 3 ? 'high' : signals.length >= 1 ? 'medium' : 'low',
+                signals,
+            };
+        });
+        const highRiskTools = toolFindings.filter(tool => tool.risk === 'high').length;
+        const mediumRiskTools = toolFindings.filter(tool => tool.risk === 'medium').length;
+        const findings = [
+            ...(protectedGatewayDetected ? [] : ['MCP target does not look like a protected Full Court Defense gateway/proxy.']),
+            ...(highRiskTools ? [`${highRiskTools} high-risk MCP tool(s) exposed.`] : []),
+            ...(mediumRiskTools ? [`${mediumRiskTools} medium-risk MCP tool(s) exposed.`] : []),
+            ...(tools.length > 20 ? [`Large MCP surface: ${tools.length} tools exposed.`] : []),
+        ];
+        return {
+            ok: true,
+            scanType: 'mcp_posture',
+            posture: findings.length === 0 ? 'pass' : highRiskTools || !protectedGatewayDetected ? 'fail' : 'warn',
+            transport,
+            destination,
+            protectedGatewayDetected,
+            elapsedMs: Date.now() - startedAt,
+            summary: {
+                totalTools: tools.length,
+                highRiskTools,
+                mediumRiskTools,
+                lowRiskTools: toolFindings.filter(tool => tool.risk === 'low').length,
+            },
+            findings,
+            tools: toolFindings,
+        };
+    }
+    finally {
+        client.close();
+    }
+}
 function startCompactWebServer(args) {
     const server = http.createServer(async (req, res) => {
         try {
@@ -2100,6 +2206,13 @@ function startCompactWebServer(args) {
                 res.end(JSON.stringify(result));
                 return;
             }
+            if (req.method === 'POST' && url.pathname === '/mcp/posture') {
+                const body = await readRequestBody(req);
+                const result = await runMcpPostureScanFromBrowser(body);
+                res.writeHead(200, { 'content-type': 'application/json; charset=utf-8' });
+                res.end(JSON.stringify(result));
+                return;
+            }
             if (req.method === 'POST' && url.pathname === '/posture/run') {
                 const body = await readRequestBody(req);
                 const result = await runPostureScanFromBrowser(args, body);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.16"
+  "version": "1.7.17"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.16",
+  "version": "1.7.17",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {