perimetercli 0.1.0

package/src/catalog.js

@@ -0,0 +1,335 @@
+/**
+ * A small, offline knowledge base of well-known MCP servers. Matching a package
+ * name against this catalog lets Perimeter report concrete capabilities and
+ * risk without talking to the network.
+ */
+
+const servers = [
+  {
+    match: ["@modelcontextprotocol/server-filesystem", "server-filesystem"],
+    name: "Filesystem",
+    capabilities: ["filesystem-read", "filesystem-write"],
+    risk: "medium",
+    tools: 6,
+    tokens: 2600,
+    note: "Reads and writes files. Write access is worth reviewing; watch for paths outside the project.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-github", "server-github"],
+    name: "GitHub",
+    capabilities: ["network-in", "repo-write"],
+    risk: "medium",
+    tools: 12,
+    tokens: 5200,
+    note: "Can read and write issues, PRs and repo contents. Credentials are usually in env — ensure scoped tokens.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-sqlite", "server-sqlite"],
+    name: "SQLite",
+    capabilities: ["db-write", "sql"],
+    risk: "medium",
+    tools: 3,
+    tokens: 3900,
+    note: "Executes SQL against a database. Ensure the agent only touches an allowed database file.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-postgres", "server-postgres"],
+    name: "Postgres",
+    capabilities: ["db-write", "sql", "network-in"],
+    risk: "high",
+    tools: 8,
+    tokens: 4800,
+    note: "Remote database write capability. Highest-risk database class; enforce read-only or a dedicated schema.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-brave-search", "server-brave-search"],
+    name: "Brave Search",
+    capabilities: ["network-in"],
+    risk: "low",
+    tools: 1,
+    tokens: 2100,
+    note: "Performs web searches. Network read only.",
+    owasp: "AGENT-02",
+  },
+  {
+    match: ["@modelcontextprotocol/server-puppeteer", "server-puppeteer"],
+    name: "Puppeteer",
+    capabilities: ["browser", "network-in"],
+    risk: "low",
+    tools: 4,
+    tokens: 3400,
+    note: "Automates a browser. Can render pages and click; not a file or shell primitive.",
+    owasp: "AGENT-02",
+  },
+  {
+    match: ["@modelcontextprotocol/server-memory", "server-memory"],
+    name: "Memory",
+    capabilities: ["memory"],
+    risk: "low",
+    tools: 3,
+    tokens: 1100,
+    note: "Stores and retrieves memory entries.",
+    owasp: "AGENT-03",
+  },
+  {
+    match: ["@modelcontextprotocol/server-everything", "server-everything"],
+    name: "Everything (demo)",
+    capabilities: ["filesystem-write", "code-exec", "shell"],
+    risk: "high",
+    tools: 17,
+    tokens: 8200,
+    note: "A demo server with broad capabilities. Treat as high risk; it purposely exercises many surfaces.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-sequential-thinking", "server-sequential-thinking"],
+    name: "Sequential Thinking",
+    capabilities: ["thinking"],
+    risk: "low",
+    tools: 1,
+    tokens: 1600,
+    note: "A structured reasoning tool. No privileged capability.",
+    owasp: "AGENT-03",
+  },
+  {
+    match: ["@modelcontextprotocol/server-aws", "server-aws", "@aws-sdk/mcp"],
+    name: "AWS",
+    capabilities: ["cloud-write", "network-out"],
+    risk: "high",
+    tools: 15,
+    tokens: 6000,
+    note: "Cloud resource manipulation. Require role-scoped credentials and a dry-run policy.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-slack", "server-slack"],
+    name: "Slack",
+    capabilities: ["network-out", "message-write"],
+    risk: "medium",
+    tools: 9,
+    tokens: 3600,
+    note: "Posts and reads messages. Can be used for outbound phishing or credential-adjacent content.",
+    owasp: "AGENT-02",
+  },
+  {
+    match: ["@modelcontextprotocol/server-gitlab", "server-gitlab"],
+    name: "GitLab",
+    capabilities: ["network-in", "repo-write"],
+    risk: "medium",
+    tools: 10,
+    tokens: 4800,
+    note: "Can read and write merge requests and repository contents. Scope the token.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-redis", "server-redis"],
+    name: "Redis",
+    capabilities: ["db-write"],
+    risk: "medium",
+    tools: 5,
+    tokens: 2200,
+    note: "Executes commands against a Redis server.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-mysql", "server-mysql"],
+    name: "MySQL",
+    capabilities: ["db-write", "sql", "network-in"],
+    risk: "high",
+    tools: 7,
+    tokens: 4400,
+    note: "Remote database write capability.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-kubernetes", "server-kubernetes", "k8s"],
+    name: "Kubernetes",
+    capabilities: ["cloud-write", "network-out"],
+    risk: "high",
+    tools: 12,
+    tokens: 5400,
+    note: "Can mutate cluster resources. Require a read-only or namespace-scoped role.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-fetch", "server-fetch", "@henrymemory/mcp-fetch"],
+    name: "Fetch",
+    capabilities: ["network-in"],
+    risk: "low",
+    tools: 1,
+    tokens: 1300,
+    note: "Fetches URLs. Network read only.",
+    owasp: "AGENT-02",
+  },
+  {
+    match: ["@modelcontextprotocol/server-jira", "server-jira"],
+    name: "Jira",
+    capabilities: ["network-in", "repo-write"],
+    risk: "medium",
+    tools: 8,
+    tokens: 4200,
+    note: "Reads and writes tickets. Scope the API token.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-linear", "server-linear"],
+    name: "Linear",
+    capabilities: ["network-in", "repo-write"],
+    risk: "medium",
+    tools: 6,
+    tokens: 3400,
+    note: "Reads and writes issues. Scope the API token.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-notion", "server-notion"],
+    name: "Notion",
+    capabilities: ["network-in", "filesystem-write"],
+    risk: "medium",
+    tools: 6,
+    tokens: 3500,
+    note: "Reads and writes Notion pages. Scope the integration token.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-sentry", "server-sentry"],
+    name: "Sentry",
+    capabilities: ["network-in"],
+    risk: "low",
+    tools: 5,
+    tokens: 2900,
+    note: "Reads issue/event data. Network read only.",
+    owasp: "AGENT-02",
+  },
+  {
+    match: ["@modelcontextprotocol/server-google-drive", "server-google-drive"],
+    name: "Google Drive",
+    capabilities: ["filesystem-write", "network-in"],
+    risk: "medium",
+    tools: 7,
+    tokens: 3800,
+    note: "Reads and writes Drive files. Scope to a specific folder.",
+    owasp: "AGENT-04",
+  },
+  {
+    match: ["@modelcontextprotocol/server-mongodb", "server-mongodb"],
+    name: "MongoDB",
+    capabilities: ["db-write", "network-in"],
+    risk: "high",
+    tools: 6,
+    tokens: 4100,
+    note: "Executes queries against MongoDB. Writes can mutate data.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-supabase", "server-supabase"],
+    name: "Supabase",
+    capabilities: ["db-write", "network-in"],
+    risk: "high",
+    tools: 8,
+    tokens: 4600,
+    note: "Database + storage writes. Scope to a read-only role.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-stripe", "server-stripe", "@stripe/mcp"],
+    name: "Stripe",
+    capabilities: ["payment", "network-in"],
+    risk: "high",
+    tools: 9,
+    tokens: 5000,
+    note: "Payment operation. Financial impact — require an approval gate.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-elasticsearch", "server-elasticsearch"],
+    name: "Elasticsearch",
+    capabilities: ["network-in", "db-write"],
+    risk: "medium",
+    tools: 5,
+    tokens: 3300,
+    note: "Queries and can index documents. Network + write.",
+    owasp: "AGENT-05",
+  },
+  {
+    match: ["@modelcontextprotocol/server-bitbucket", "server-bitbucket"],
+    name: "Bitbucket",
+    capabilities: ["network-in", "repo-write"],
+    risk: "medium",
+    tools: 9,
+    tokens: 4500,
+    note: "Reads and writes repositories. Scope the token.",
+    owasp: "AGENT-04",
+  },
+];
+
+export const KNOWN_SERVERS = servers;
+
+export function catalogFor(packageOrName) {
+  const key = String(packageOrName || "").toLowerCase();
+  for (const s of servers) {
+    for (const m of s.match) {
+      if (key.includes(m.toLowerCase()) || m.toLowerCase().includes(key)) {
+        return s;
+      }
+    }
+  }
+  return null;
+}
+
+/** A default token/risk profile for an unknown server. */
+export function unknownServerProfile(name) {
+  return {
+    name,
+    capabilities: [],
+    risk: "unknown",
+    tools: null,
+    tokens: 1500,
+    note: "Unrecognised server. Capabilities could not be verified offline.",
+    owasp: "AGENT-06",
+  };
+}
+
+/** A lightweight typosquat check against catalog names. */
+export function looksTyposquatted(name) {
+  const key = String(name || "").toLowerCase();
+  const normalized = key
+    .replace(/^@/, "")
+    .replace(/^modelcontextprotocol\//, "")
+    .replace(/^server-/, "");
+  for (const s of servers) {
+    for (const m of s.match) {
+      const theirs = m
+        .replace(/^@/, "")
+        .replace(/^modelcontextprotocol\//, "")
+        .replace(/^server-/, "");
+      if (theirs === normalized) continue;
+      if (similarEnough(theirs, normalized)) return true;
+    }
+  }
+  return false;
+}
+
+function similarEnough(a, b) {
+  if (a.length !== b.length && Math.abs(a.length - b.length) > 1) return false;
+  // Levenshtein distance <= 1
+  let edits = 0;
+  const n = a.length;
+  const m = b.length;
+  const dp = Array.from({ length: n + 1 }, (_, i) =>
+    Array.from({ length: m + 1 }, (_, j) => (j === 0 ? i : i === 0 ? j : 0))
+  );
+  for (let i = 0; i <= n; i++) dp[i][0] = i;
+  for (let j = 0; j <= m; j++) dp[0][j] = j;
+  for (let i = 1; i <= n; i++) {
+    for (let j = 1; j <= m; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost);
+    }
+  }
+  return dp[n][m] <= 1;
+}