mcp-recon 0.2.2

package/dist/transport.js

@@ -0,0 +1,74 @@
+/**
+ * Server-spec parsing + transport construction.
+ *
+ * Per docs/SPEC.md, v0.1 supports three forms:
+ *
+ *   stdio:<command> [args...]      — spawn process; stdio transport
+ *   stdio:./path/to/binary --arg   — relative path also accepted
+ *   http://localhost:3000          — HTTP transport
+ *
+ * The HTTP transport stub is here for v0.1; the implementation
+ * lands in week 2 once we have a real HTTP-transport MCP server to
+ * test against. For week 1 the focus is stdio + the official
+ * @modelcontextprotocol/server-filesystem.
+ */
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+/**
+ * Parse a server-spec string into structured form.
+ *
+ * Throws if the spec doesn't match a supported shape — we fail loud
+ * here rather than silently degrading to a default, because a
+ * mistyped spec produces a confusing connect-failure later.
+ */
+export function parseServerSpec(spec) {
+    if (spec.startsWith("stdio:")) {
+        const rest = spec.slice("stdio:".length).trim();
+        if (rest === "") {
+            throw new Error(`parseServerSpec: stdio: prefix requires a command after the colon (got "${spec}")`);
+        }
+        // Naive shell-splitting: split on whitespace. Good enough for
+        // `stdio:npx @modelcontextprotocol/server-filesystem /tmp` and
+        // similar. v0.2 may add proper quoting if real specs need it.
+        const parts = rest.split(/\s+/).filter((p) => p.length > 0);
+        const command = parts[0];
+        if (command === undefined) {
+            throw new Error(`parseServerSpec: command empty after split (got "${spec}")`);
+        }
+        return { kind: "stdio", command, args: parts.slice(1) };
+    }
+    if (spec.startsWith("http://") || spec.startsWith("https://")) {
+        return { kind: "http", url: spec };
+    }
+    throw new Error(`parseServerSpec: unrecognised spec "${spec}" — expected stdio:<cmd> or http(s)://...`);
+}
+/**
+ * Open a connected MCP `Client` for the given spec.
+ *
+ * Caller owns shutdown — pass the result to `closeClient` when
+ * finished. We do not auto-close on process exit because some
+ * commands (`scan`) hold the client across multiple steps.
+ */
+export async function openClient(spec) {
+    const client = new Client({ name: "mcp-recon", version: "0.0.1" }, { capabilities: {} });
+    switch (spec.kind) {
+        case "stdio": {
+            const transport = new StdioClientTransport({
+                command: spec.command,
+                args: spec.args,
+            });
+            await client.connect(transport);
+            return client;
+        }
+        case "http": {
+            // Stub — v0.1 week 2 will wire this against an HTTP MCP
+            // server. The MCP SDK's HTTP transport is the natural target.
+            throw new Error(`openClient: http transport not implemented in v0.1 scaffold (got ${spec.url})`);
+        }
+    }
+}
+/** Close a client opened by `openClient`. Safe to call multiple times. */
+export async function closeClient(client) {
+    await client.close();
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAOjF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,2EAA2E,IAAI,IAAI,CACpF,CAAC;QACJ,CAAC;QACD,8DAA8D;QAC9D,+DAA+D;QAC/D,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,2CAA2C,CACvF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EACvC,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;IAEF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,wDAAwD;YACxD,8DAA8D;YAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,CAAC,GAAG,GAAG,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "mcp-recon",
+  "version": "0.2.2",
+  "description": "Reverse-engineer MCP server tool surfaces. Enumerate, fuzz, classify, report. CLI + library.",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai-security",
+    "agent-security",
+    "owasp-llm",
+    "mitre-atlas",
+    "security",
+    "cli"
+  ],
+  "license": "Apache-2.0",
+  "author": "Euan Crosson <euanmcrosson@gmail.com>",
+  "homepage": "https://github.com/euanmcrosson-dotcom/mcp-recon#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/euanmcrosson-dotcom/mcp-recon.git",
+    "directory": "packages/mcp-recon-cli"
+  },
+  "bugs": {
+    "url": "https://github.com/euanmcrosson-dotcom/mcp-recon/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "mcp-recon": "./dist/bin/recon.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "build": "tsc",
+    "lint": "biome check src",
+    "typecheck": "tsc --noEmit",
+    "recon": "tsx src/bin/recon.ts",
+    "bench": "tsx bench/run.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.4.14",
+    "@types/node": "25.6.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "tinybench": "^2.9.0",
+    "tsx": "^4.21.0",
+    "typescript": "6.0.3",
+    "vitest": "^4.1.5"
+  }
+}