nsauditor-ai 0.1.2 → 0.1.4

package/README.md

@@ -264,25 +264,36 @@ Security: SSRF protection on all host inputs (blocks RFC 1918, loopback, fc00::/
 
 ### Claude Desktop Setup
 
-Add this to your `claude_desktop_config.json` (Settings → Developer → Edit Config):
+First install the package globally:
+
+```bash
+npm install -g nsauditor-ai
+```
+
+Then add this to your `claude_desktop_config.json` (Settings → Developer → Edit Config):
 
 ```json
 {
   "mcpServers": {
     "nsauditor-ai": {
-      "command": "npx",
-      "args": ["nsauditor-ai-mcp"],
+      "command": "node",
+      "args": ["/path/to/global/node_modules/nsauditor-ai/mcp_server.mjs"],
       "env": {
         "AI_PROVIDER": "claude",
         "ANTHROPIC_API_KEY": "your-key-here",
-        "NSA_ALLOW_ALL_HOSTS": "1"
+        "NSA_ALLOW_ALL_HOSTS": "1",
+        "PLUGIN_TIMEOUT_MS": "5000"
       }
     }
   }
 }
 ```
 
-Set `NSA_ALLOW_ALL_HOSTS=1` if you need to scan private/RFC 1918 addresses (e.g., `192.168.x.x`). The `AI_PROVIDER` and key variables are optional — they enable AI-powered analysis of scan results.
+Find your global install path with `npm root -g`, then append `/nsauditor-ai/mcp_server.mjs`.
+
+- `NSA_ALLOW_ALL_HOSTS=1` — required to scan private/RFC 1918 addresses (e.g., `192.168.x.x`)
+- `PLUGIN_TIMEOUT_MS=5000` — reduces per-plugin timeout to 5s so the full scan completes within Claude Desktop's 60s MCP limit
+- `AI_PROVIDER` and API key — optional, enables AI-powered analysis of scan results
 
 ### Claude Code Setup
 

package/mcp_server.mjs

@@ -8,6 +8,10 @@
 //   import { createServer, toolHandlers } from './mcp_server.mjs'  — for testing
 
 import { createRequire } from 'node:module';
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { resolveAndValidate } from './utils/net_validation.mjs';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
@@ -65,7 +69,7 @@ let _nvdClient = null;
 async function getPluginManager() {
   if (_pluginManager) return _pluginManager;
   const { default: PluginManager } = await import('./plugin_manager.mjs');
-  _pluginManager = await PluginManager.create('./plugins');
+  _pluginManager = await PluginManager.create(`${__dirname}/plugins`);
   return _pluginManager;
 }
 
@@ -194,11 +198,14 @@ export async function validateHost(host) {
     throw new Error('Scanning loopback, link-local, or metadata addresses is not allowed via MCP');
   }
 
-  // DNS resolution check — catches rebinding, decimal/octal IPs, IPv6-mapped addrs
-  try {
-    await resolveAndValidate(h);
-  } catch (err) {
-    throw new Error('Scanning loopback, link-local, or metadata addresses is not allowed via MCP');
+  // DNS resolution check — catches rebinding, decimal/octal IPs, IPv6-mapped addrs.
+  // NSA_ALLOW_ALL_HOSTS=1 bypasses RFC 1918 checks for local network auditing.
+  if (!process.env.NSA_ALLOW_ALL_HOSTS) {
+    try {
+      await resolveAndValidate(h);
+    } catch (err) {
+      throw new Error('Scanning loopback, link-local, or metadata addresses is not allowed via MCP');
+    }
   }
   return h;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nsauditor-ai",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Modular AI-assisted network security audit platform — Community Edition",
   "type": "module",
   "private": false,