agentsentinel-cli 0.7.2__tar.gz → 0.7.4__tar.gz

{agentsentinel_cli-0.7.2 → agentsentinel_cli-0.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsentinel-cli
-Version: 0.7.2
+Version: 0.7.4
 Summary: Agentic security CLI — AI analyst with memory, supply chain audit, MCP audit, red-team probing, and agent discovery
 Project-URL: Homepage, https://github.com/jaydenaung/agentsentinel-cli
 Project-URL: Repository, https://github.com/jaydenaung/agentsentinel-cli

{agentsentinel_cli-0.7.2 → agentsentinel_cli-0.7.4}/agentsentinel_cli/cli.py

@@ -128,6 +128,8 @@ def _enrich_from_platform(agents, scores_map, connect_url, api_key):
               help="Probe local ports — confirmed via MCP protocol handshake.")
 @click.option("--docker/--no-docker", default=False, show_default=True,
               help="Inspect running Docker containers for MCP/agent patterns.")
+@click.option("--host", default=None, metavar="IP",
+              help="Scan a single host, e.g. 10.0.1.45.")
 @click.option("--subnet", default=None, metavar="CIDR",
               help="Scan a CIDR subnet for MCP servers, e.g. 10.0.0.0/24.")
 @click.option("--ports", default=None, metavar="RANGE",
@@ -142,6 +144,7 @@ def discover(
     process: bool,
     network: bool,
     docker: bool,
+    host: str | None,
     subnet: str | None,
     ports: str | None,
     auth_header: str | None,
@@ -151,12 +154,12 @@ def discover(
     """Find MCP servers and AI agent processes in your environment.
 
     Confirms MCP servers via protocol handshake — not just open ports.
-    Use --subnet to scan across a network range.
 
     \b
     Examples:
         sentinel discover                              local processes + ports
-        sentinel discover --subnet 10.0.0.0/24        scan internal network
+        sentinel discover --host 10.0.1.45            single remote host
+        sentinel discover --subnet 10.0.0.0/24        full subnet scan
         sentinel discover --subnet 10.0.0.0/24 \\
           --auth-header 'Authorization: Bearer token'  scan with credentials
         sentinel discover --no-process                 network only
@@ -164,7 +167,7 @@ def discover(
         sentinel discover --ports 8000-9001            custom port range
         sentinel discover --format json                machine-readable output
     """
-    from agentsentinel_cli.discover import run_discovery, as_json as discover_json
+    from agentsentinel_cli.discover import run_discovery, scan_network, as_json as discover_json
     from agentsentinel_cli.discover_report import print_discover_result, print_subnet_progress
 
     # Parse port range
@@ -179,6 +182,23 @@ def discover(
         key, _, val = auth_header.partition(":")
         extra_headers[key.strip()] = val.strip()
 
+    # --host: single-host scan — bypass run_discovery and call scan_network directly
+    if host:
+        if fmt == "text":
+            _warn_missing_deps(False, True)
+        agents = scan_network(
+            host=host,
+            ports=port_list,
+            extra_headers=extra_headers or None,
+        )
+        if fmt == "json":
+            click.echo(discover_json(agents))
+            return
+        print_discover_result(agents, vectors=[f"host ({host})"], verbose=verbose)
+        if any(a.risk == "CRITICAL" for a in agents):
+            sys.exit(1)
+        return
+
     # Collect active scan vectors for the header
     vectors = []
     if process:
@@ -192,7 +212,7 @@ def discover(
 
     if not vectors:
         console.print("[yellow]No scan vectors selected — use at least one of: "
-                      "--process, --network, --subnet, --docker[/yellow]")
+                      "--process, --network, --host, --subnet, --docker[/yellow]")
         sys.exit(1)
 
     if fmt == "text":

{agentsentinel_cli-0.7.2 → agentsentinel_cli-0.7.4}/agentsentinel_cli/discover.py

@@ -379,6 +379,23 @@ def scan_subnet(
 
 # ── MCP protocol prober ───────────────────────────────────────────────────────
 
+def _auth_is_enforced(base: str, timeout: float) -> bool:
+    """Return True only if the server actively rejects unauthenticated requests.
+
+    Probes without credentials. McpAuthRequired (401/403) → enforced.
+    Successful handshake → not enforced (server accepts anyone).
+    Any other error → assume not enforced (conservative — don't hide risk).
+    """
+    from agentsentinel_cli.mcp_client import scan_http, McpAuthRequired, McpError
+    try:
+        scan_http(base, extra_headers=None, timeout=timeout)
+        return False
+    except McpAuthRequired:
+        return True
+    except (McpError, Exception):
+        return False
+
+
 def _probe_mcp(
     host: str,
     port: int,
@@ -423,28 +440,34 @@ def _probe_mcp(
     except Exception:
         return None
 
-    # Handshake succeeded — assess risk based on actual tool content
+    # Handshake succeeded — assess risk based on actual tool content and whether
+    # the server actually enforces authentication.
     tool_names = [t.name for t in server.tools]
     has_dangerous = any(t.is_dangerous for t in server.tools)
     has_write = any(t.scope == "write" for t in server.tools)
-    auth_present = bool(extra_headers)
 
-    if not auth_present:
+    # When credentials were provided, verify the server actually requires them.
+    # If it accepts a probe WITHOUT credentials too, auth is not enforced — the
+    # server is still open to anyone and the risk doesn't change.
+    auth_enforced = False
+    if extra_headers:
+        auth_enforced = _auth_is_enforced(base, timeout)
+
+    if not extra_headers or not auth_enforced:
         if has_dangerous or has_write:
             risk = "CRITICAL"
-            risk_reason = (
-                f"Unauthenticated MCP server with dangerous/write tools: "
-                f"{', '.join(t.name for t in server.tools if t.is_dangerous or t.scope == 'write')}"
-            )
+            bad = ", ".join(t.name for t in server.tools if t.is_dangerous or t.scope == "write")
+            risk_reason = f"Unauthenticated MCP server with dangerous/write tools: {bad}"
         else:
+            n = len(server.tools)
             risk = "HIGH"
             risk_reason = (
-                f"Unauthenticated MCP server — {len(server.tools)} tool"
-                f"{'s' if len(server.tools) != 1 else ''} publicly accessible"
+                f"Unauthenticated MCP server — {n} tool{'s' if n != 1 else ''} publicly accessible"
             )
     else:
+        n = len(server.tools)
         risk = "LOW"
-        risk_reason = f"MCP server (authenticated) — {len(server.tools)} tool{'s' if len(server.tools) != 1 else ''} enumerated"
+        risk_reason = f"MCP server (auth enforced) — {n} tool{'s' if n != 1 else ''} enumerated"
 
     scan_url = f"{base}/sse" if server.transport == "sse" else base
     auth_flag = (

{agentsentinel_cli-0.7.2 → agentsentinel_cli-0.7.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentsentinel-cli"
-version = "0.7.2"
+version = "0.7.4"
 description = "Agentic security CLI — AI analyst with memory, supply chain audit, MCP audit, red-team probing, and agent discovery"
 readme = "README.md"
 requires-python = ">=3.10"

agentsentinel_cli-0.7.4/tmp/note.md

@@ -0,0 +1,4 @@
+# Notes
+
+python3.11 -m build 
+twine upload dist/agentsentinel_cli-0.7.3* --username __token__ --password $PYPI_TOKEN