cycode 3.15.3.dev7__py3-none-any.whl → 3.15.4.dev1__py3-none-any.whl

cycode/cli/apps/ai_guardrails/scan/scan_command.py

@@ -1,26 +1,22 @@
-"""
-Scan command for AI guardrails.
+"""Scan command for AI guardrails IDE hooks.
 
-This command handles AI IDE hooks by reading JSON from stdin and outputting
-a JSON response to stdout. It scans prompts, file reads, and MCP tool calls
-for secrets before they are sent to AI models.
+Reads a JSON payload from stdin, routes it through the IDE-specific parser and
+the shared event handlers, then writes an IDE-specific JSON response to stdout.
 
-Supports multiple IDEs with different hook event types. The specific hook events
-supported depend on the IDE being used (e.g., Cursor supports beforeSubmitPrompt,
-beforeReadFile, beforeMCPExecution).
+The handlers in ``handlers.py`` are agent-agnostic (they return
+``HookDecision``); ``IDE.build_hook_response`` is the per-IDE translation step.
 """
 
 import sys
-from typing import Annotated
+from typing import Annotated, Optional, Union
 
 import click
 import typer
 
-from cycode.cli.apps.ai_guardrails.consts import AIIDEType
+from cycode.cli.apps.ai_guardrails.ides import DEFAULT_IDE_NAME, get_ide
+from cycode.cli.apps.ai_guardrails.ides.base import HookDecision
 from cycode.cli.apps.ai_guardrails.scan.handlers import get_handler_for_event
-from cycode.cli.apps.ai_guardrails.scan.payload import AIHookPayload
 from cycode.cli.apps.ai_guardrails.scan.policy import load_policy
-from cycode.cli.apps.ai_guardrails.scan.response_builders import get_response_builder
 from cycode.cli.apps.ai_guardrails.scan.types import AiHookEventType
 from cycode.cli.apps.ai_guardrails.scan.utils import output_json, safe_json_parse
 from cycode.cli.exceptions.custom_exceptions import HttpUnauthorizedError
@@ -31,7 +27,7 @@ logger = get_logger('AI Guardrails')
 
 
 def _get_auth_error_message(error: Exception) -> str:
-    """Get user-friendly message for authentication errors."""
+    """User-friendly message for authentication errors."""
     if isinstance(error, click.ClickException):
         # Missing credentials
         return f'{error.message} Please run `cycode auth` to set up your credentials.'
@@ -47,6 +43,23 @@ def _get_auth_error_message(error: Exception) -> str:
     return 'Authentication failed. Please run `cycode auth` to set up your credentials.'
 
 
+def _deny_for_event(
+    event_name: Optional[Union[str, AiHookEventType]],
+    user_message: str,
+    agent_message: Optional[str] = None,
+) -> HookDecision:
+    """Build a deny decision matched to ``event_name``'s response shape.
+
+    PROMPT events use the prompt-block shape (no agent_message). For anything
+    else — including unknown event names — fall back to FILE_READ since
+    FILE_READ and MCP_EXECUTION share the same response shape on both IDEs.
+    """
+    if event_name == AiHookEventType.PROMPT:
+        return HookDecision.deny(AiHookEventType.PROMPT, user_message)
+    target = event_name if isinstance(event_name, AiHookEventType) else AiHookEventType.FILE_READ
+    return HookDecision.deny(target, user_message, agent_message)
+
+
 def _initialize_clients(ctx: typer.Context) -> None:
     """Initialize API clients.
 
@@ -69,44 +82,36 @@ def scan_command(
             help='IDE that sent the payload (e.g., "cursor"). Defaults to cursor.',
             hidden=True,
         ),
-    ] = AIIDEType.CURSOR.value,
+    ] = DEFAULT_IDE_NAME,
 ) -> None:
     """Scan content from AI IDE hooks for secrets.
 
-    This command reads a JSON payload from stdin containing hook event data
-    and outputs a JSON response to stdout indicating whether to allow or block the action.
-
-    The hook event type is determined from the event field in the payload (field name
-    varies by IDE). Each IDE may support different hook events for scanning prompts,
-    file access, and tool executions.
-
-    Example usage (from IDE hooks configuration):
-        { "command": "cycode ai-guardrails scan" }
+    Reads a JSON payload from stdin and outputs a JSON response to stdout
+    indicating whether to allow or block the action.
     """
+    ide_integration = get_ide(ide)
+
     stdin_data = sys.stdin.read().strip()
     payload = safe_json_parse(stdin_data)
 
-    tool = ide.lower()
-    response_builder = get_response_builder(tool)
-
     if not payload:
         logger.debug('Empty or invalid JSON payload received')
-        output_json(response_builder.allow_prompt())
+        output_json(ide_integration.build_hook_response(HookDecision.allow(AiHookEventType.PROMPT)))
         return
 
-    # Check if the payload matches the expected IDE - prevents double-processing
-    # when Cursor reads Claude Code hooks from ~/.claude/settings.json
-    if not AIHookPayload.is_payload_for_ide(payload, tool):
+    # Prevent cross-IDE processing (e.g. Cursor reading Claude Code hooks
+    # from ~/.claude/settings.json).
+    if not ide_integration.matches_payload(payload):
         logger.debug(
             'Payload event does not match expected IDE, skipping',
-            extra={'hook_event_name': payload.get('hook_event_name'), 'expected_ide': tool},
+            extra={'hook_event_name': payload.get('hook_event_name'), 'expected_ide': ide_integration.name},
         )
-        output_json(response_builder.allow_prompt())
+        output_json(ide_integration.build_hook_response(HookDecision.allow(AiHookEventType.PROMPT)))
         return
 
-    unified_payload = AIHookPayload.from_payload(payload, tool=tool)
+    unified_payload = ide_integration.parse_hook_payload(payload)
     event_name = unified_payload.event_name
-    logger.debug('Processing AI guardrails hook', extra={'event_name': event_name, 'tool': tool})
+    logger.debug('Processing AI guardrails hook', extra={'event_name': event_name, 'ide': ide_integration.name})
 
     workspace_roots = payload.get('workspace_roots', ['.'])
     policy = load_policy(workspace_roots[0])
@@ -117,26 +122,33 @@ def scan_command(
         handler = get_handler_for_event(event_name)
         if handler is None:
             logger.debug('Unknown hook event, allowing by default', extra={'event_name': event_name})
-            output_json(response_builder.allow_prompt())
+            output_json(ide_integration.build_hook_response(HookDecision.allow(AiHookEventType.PROMPT)))
             return
 
-        response = handler(ctx, unified_payload, policy)
-        logger.debug('Hook handler completed', extra={'event_name': event_name, 'response': response})
-        output_json(response)
+        decision = handler(ctx, unified_payload, policy)
+        logger.debug('Hook handler completed', extra={'event_name': event_name, 'action': decision.action.value})
+        output_json(ide_integration.build_hook_response(decision))
 
     except (click.ClickException, HttpUnauthorizedError) as e:
-        error_message = _get_auth_error_message(e)
-        if event_name == AiHookEventType.PROMPT:
-            output_json(response_builder.deny_prompt(error_message))
-            return
-        output_json(response_builder.deny_permission(error_message, 'Authentication required'))
+        output_json(
+            ide_integration.build_hook_response(
+                _deny_for_event(event_name, _get_auth_error_message(e), 'Authentication required')
+            )
+        )
 
     except Exception as e:
         logger.error('Hook handler failed', exc_info=e)
         if policy.get('fail_open', True):
-            output_json(response_builder.allow_prompt())
-            return
-        if event_name == AiHookEventType.PROMPT:
-            output_json(response_builder.deny_prompt('Cycode guardrails error - blocking due to fail-closed policy'))
+            output_json(ide_integration.build_hook_response(HookDecision.allow(AiHookEventType.PROMPT)))
             return
-        output_json(response_builder.deny_permission('Cycode guardrails error', 'Blocking due to fail-closed policy'))
+        output_json(
+            ide_integration.build_hook_response(
+                _deny_for_event(
+                    event_name,
+                    'Cycode guardrails error - blocking due to fail-closed policy'
+                    if event_name == AiHookEventType.PROMPT
+                    else 'Cycode guardrails error',
+                    'Blocking due to fail-closed policy',
+                )
+            )
+        )

cycode/cli/apps/ai_guardrails/scan/types.py

@@ -1,4 +1,9 @@
-"""Type definitions for AI guardrails."""
+"""Canonical event types and outcome enums for AI guardrails.
+
+Per-IDE event-name mappings live on the IDE class (in
+`cycode/cli/apps/ai_guardrails/ides/`); only the IDE-agnostic enums are kept
+here.
+"""
 
 import sys
 
@@ -13,36 +18,13 @@ else:
 
 
 class AiHookEventType(StrEnum):
-    """Canonical event types for AI guardrails.
-
-    These are IDE-agnostic event types. Each IDE's specific event names
-    are mapped to these canonical types using the mapping dictionaries below.
-    """
+    """Canonical, IDE-agnostic hook event types."""
 
     PROMPT = 'Prompt'
     FILE_READ = 'FileRead'
     MCP_EXECUTION = 'McpExecution'
 
 
-# IDE-specific event name mappings to canonical types
-CURSOR_EVENT_MAPPING = {
-    'beforeSubmitPrompt': AiHookEventType.PROMPT,
-    'beforeReadFile': AiHookEventType.FILE_READ,
-    'beforeMCPExecution': AiHookEventType.MCP_EXECUTION,
-}
-
-# Claude Code event mapping - note that PreToolUse requires tool_name inspection
-# to determine the actual event type (file read vs MCP execution)
-CLAUDE_CODE_EVENT_MAPPING = {
-    'UserPromptSubmit': AiHookEventType.PROMPT,
-    'PreToolUse': None,  # Requires tool_name inspection to determine actual type
-}
-
-# Set of known event names per IDE (for IDE detection)
-CURSOR_EVENT_NAMES = set(CURSOR_EVENT_MAPPING.keys())
-CLAUDE_CODE_EVENT_NAMES = set(CLAUDE_CODE_EVENT_MAPPING.keys())
-
-
 class AIHookOutcome(StrEnum):
     """Outcome of an AI hook event evaluation."""
 
@@ -52,11 +34,7 @@ class AIHookOutcome(StrEnum):
 
 
 class BlockReason(StrEnum):
-    """Reason why an AI hook event was blocked.
-
-    These are categorical reasons sent to the backend for tracking/analytics,
-    separate from the detailed user-facing messages.
-    """
+    """Categorical reason for blocking (sent to backend for tracking)."""
 
     SECRETS_IN_PROMPT = 'secrets_in_prompt'
     SECRETS_IN_FILE = 'secrets_in_file'

cycode/cli/apps/ai_guardrails/session_start_command.py

@@ -1,18 +1,12 @@
+"""Handle AI guardrails session start: auth, conversation creation, session context."""
+
 import sys
 from typing import TYPE_CHECKING, Annotated, Optional
 
 import typer
 
-from cycode.cli.apps.ai_guardrails.consts import AIIDEType
-from cycode.cli.apps.ai_guardrails.scan.claude_config import (
-    get_mcp_servers,
-    get_user_email,
-    load_claude_config,
-    load_claude_settings,
-    resolve_plugins,
-)
-from cycode.cli.apps.ai_guardrails.scan.cursor_config import load_cursor_config
-from cycode.cli.apps.ai_guardrails.scan.payload import AIHookPayload, extract_from_claude_transcript
+from cycode.cli.apps.ai_guardrails.ides import DEFAULT_IDE_NAME, get_ide
+from cycode.cli.apps.ai_guardrails.ides.base import IDE
 from cycode.cli.apps.ai_guardrails.scan.utils import safe_json_parse
 from cycode.cli.apps.auth.auth_common import get_authorization_info
 from cycode.cli.apps.auth.auth_manager import AuthManager
@@ -26,69 +20,10 @@ if TYPE_CHECKING:
 logger = get_logger('AI Guardrails')
 
 
-def _build_session_payload(payload: dict, ide: str) -> AIHookPayload:
-    """Build an AIHookPayload from a session-start stdin payload."""
-    if ide == AIIDEType.CLAUDE_CODE:
-        claude_config = load_claude_config()
-        ide_user_email = get_user_email(claude_config) if claude_config else None
-        ide_version, _, _ = extract_from_claude_transcript(payload.get('transcript_path'))
-
-        return AIHookPayload(
-            conversation_id=payload.get('session_id'),
-            ide_user_email=ide_user_email,
-            model=payload.get('model'),
-            ide_provider=AIIDEType.CLAUDE_CODE.value,
-            ide_version=ide_version,
-            source=payload.get('source'),
-        )
-
-    # Cursor
-    return AIHookPayload(
-        conversation_id=payload.get('conversation_id'),
-        ide_user_email=payload.get('user_email'),
-        model=payload.get('model'),
-        ide_provider=AIIDEType.CURSOR.value,
-        ide_version=payload.get('cursor_version'),
-    )
-
-
-def _get_claude_code_session_context() -> tuple[dict, dict]:
-    """Return (mcp_servers, enabled_plugins) for Claude Code.
-
-    Merges MCP servers from ~/.claude.json (user-configured) with those contributed
-    by enabled plugins. Plugin metadata (name, version, description) is included in
-    the enabled_plugins dict when resolvable.
-    """
-    config = load_claude_config()
-    mcp_servers = dict(get_mcp_servers(config) or {}) if config else {}
-
-    settings = load_claude_settings()
-    if settings:
-        plugin_mcp, enriched_plugins = resolve_plugins(settings)
-        mcp_servers.update(plugin_mcp)
-    else:
-        enriched_plugins = {}
-
-    return mcp_servers, enriched_plugins
-
-
-def _get_cursor_session_context() -> tuple[dict, dict]:
-    """Return (mcp_servers, enabled_plugins) for Cursor. Cursor has no plugin system."""
-    config = load_cursor_config()
-    mcp_servers = dict(get_mcp_servers(config) or {}) if config else {}
-    return mcp_servers, {}
-
-
-def _report_session_context(ai_client: 'AISecurityManagerClient', ide: str, user_email: Optional[str]) -> None:
+def _report_session_context(ai_client: 'AISecurityManagerClient', ide: IDE, user_email: Optional[str]) -> None:
     """Report IDE session context to the AI security manager. Never raises."""
     try:
-        if ide == AIIDEType.CLAUDE_CODE:
-            mcp_servers, enabled_plugins = _get_claude_code_session_context()
-        elif ide == AIIDEType.CURSOR:
-            mcp_servers, enabled_plugins = _get_cursor_session_context()
-        else:
-            return
-
+        mcp_servers, enabled_plugins = ide.get_session_context()
         if not mcp_servers and not enabled_plugins:
             return
         ai_client.report_session_context(
@@ -109,16 +44,17 @@ def session_start_command(
             help='IDE that triggered the session start.',
             hidden=True,
         ),
-    ] = AIIDEType.CURSOR.value,
+    ] = DEFAULT_IDE_NAME,
 ) -> None:
     """Handle session start: ensure auth, create conversation, report session context."""
+    ide_integration = get_ide(ide)
+
     # Step 1: Ensure authentication
     auth_info = get_authorization_info(ctx)
     if auth_info is None:
         logger.debug('Not authenticated, starting authentication')
         try:
-            auth_manager = AuthManager()
-            auth_manager.authenticate()
+            AuthManager().authenticate()
         except Exception as err:
             handle_auth_exception(ctx, err)
             return
@@ -136,8 +72,8 @@ def session_start_command(
         logger.debug('Empty or invalid stdin payload, skipping session initialization')
         return
 
-    # Step 3: Build session payload and initialize API client
-    session_payload = _build_session_payload(payload, ide)
+    # Step 3: Build session payload + initialize API client
+    session_payload = ide_integration.build_session_payload(payload)
 
     try:
         ai_client = get_ai_security_manager_client(ctx)
@@ -151,5 +87,5 @@ def session_start_command(
     except Exception as e:
         logger.debug('Failed to create conversation during session start', exc_info=e)
 
-    # Step 5: Report session context (MCP servers)
-    _report_session_context(ai_client, ide, session_payload.ide_user_email)
+    # Step 5: Report session context (MCP servers, enabled plugins)
+    _report_session_context(ai_client, ide_integration, session_payload.ide_user_email)

cycode/cli/apps/ai_guardrails/status_command.py

@@ -7,9 +7,9 @@ from typing import Annotated, Optional
 import typer
 from rich.table import Table
 
-from cycode.cli.apps.ai_guardrails.command_utils import console, validate_and_parse_ide, validate_scope
-from cycode.cli.apps.ai_guardrails.consts import IDE_CONFIGS, AIIDEType
+from cycode.cli.apps.ai_guardrails.command_utils import console, validate_scope
 from cycode.cli.apps.ai_guardrails.hooks_manager import get_hooks_status
+from cycode.cli.apps.ai_guardrails.ides import DEFAULT_IDE_NAME, IDES, resolve_ides
 
 
 def status_command(
@@ -26,9 +26,9 @@ def status_command(
         str,
         typer.Option(
             '--ide',
-            help='IDE to check status for (e.g., "cursor", "claude-code", or "all" for all IDEs). Defaults to cursor.',
+            help=f'IDE to check status for ({", ".join(IDES)}, or "all").',
         ),
-    ] = AIIDEType.CURSOR.value,
+    ] = DEFAULT_IDE_NAME,
     repo_path: Annotated[
         Optional[Path],
         typer.Option(
@@ -43,32 +43,30 @@ def status_command(
 ) -> None:
     """Show AI guardrails hook installation status.
 
-    Displays the current status of Cycode AI guardrails hooks for the specified IDE.
-
     Examples:
         cycode ai-guardrails status                # Show both user and repo status
         cycode ai-guardrails status --scope user   # Show only user-level status
         cycode ai-guardrails status --scope repo   # Show only repo-level status
-        cycode ai-guardrails status --ide cursor   # Check status for Cursor IDE
-        cycode ai-guardrails status --ide all      # Check status for all supported IDEs
+        cycode ai-guardrails status --ide claude-code
+        cycode ai-guardrails status --ide all      # Check every supported IDE
     """
-    # Validate inputs (status allows 'all' scope)
     validate_scope(scope, allowed_scopes=('user', 'repo', 'all'))
     if repo_path is None:
         repo_path = Path(os.getcwd())
-    ide_type = validate_and_parse_ide(ide)
-
-    ides_to_check: list[AIIDEType] = list(AIIDEType) if ide_type is None else [ide_type]
+    ides_to_check = resolve_ides(ide)
 
     scopes_to_check = ['user', 'repo'] if scope == 'all' else [scope]
 
     for current_ide in ides_to_check:
-        ide_name = IDE_CONFIGS[current_ide].name
         console.print()
-        console.print(f'[bold cyan]═══ {ide_name} ═══[/]')
+        console.print(f'[bold cyan]═══ {current_ide.display_name} ═══[/]')
 
         for check_scope in scopes_to_check:
-            status = get_hooks_status(check_scope, repo_path if check_scope == 'repo' else None, ide=current_ide)
+            status = get_hooks_status(
+                current_ide,
+                check_scope,
+                repo_path if check_scope == 'repo' else None,
+            )
 
             console.print()
             console.print(f'[bold]{check_scope.upper()} SCOPE[/]')
@@ -83,7 +81,6 @@ def status_command(
             else:
                 console.print('[yellow]○ Cycode AI guardrails: NOT INSTALLED[/]')
 
-            # Show hook details
             table = Table(show_header=True, header_style='bold')
             table.add_column('Hook Event')
             table.add_column('Cycode Enabled')

cycode/cli/apps/ai_guardrails/uninstall_command.py

@@ -5,14 +5,9 @@ from typing import Annotated, Optional
 
 import typer
 
-from cycode.cli.apps.ai_guardrails.command_utils import (
-    console,
-    resolve_repo_path,
-    validate_and_parse_ide,
-    validate_scope,
-)
-from cycode.cli.apps.ai_guardrails.consts import IDE_CONFIGS, AIIDEType
+from cycode.cli.apps.ai_guardrails.command_utils import console, resolve_repo_path, validate_scope
 from cycode.cli.apps.ai_guardrails.hooks_manager import uninstall_hooks
+from cycode.cli.apps.ai_guardrails.ides import DEFAULT_IDE_NAME, IDES, resolve_ides
 
 
 def uninstall_command(
@@ -29,9 +24,9 @@ def uninstall_command(
         str,
         typer.Option(
             '--ide',
-            help='IDE to uninstall hooks from (e.g., "cursor", "claude-code", "all"). Defaults to cursor.',
+            help=f'IDE to uninstall hooks from ({", ".join(IDES)}, or "all").',
         ),
-    ] = AIIDEType.CURSOR.value,
+    ] = DEFAULT_IDE_NAME,
     repo_path: Annotated[
         Optional[Path],
         typer.Option(
@@ -46,32 +41,27 @@ def uninstall_command(
 ) -> None:
     """Remove AI guardrails hooks from supported IDEs.
 
-    This command removes Cycode hooks from the IDE's hooks configuration.
-    Other hooks (if any) will be preserved.
+    Removes Cycode hooks from the IDE's hooks configuration. Other hooks
+    (if any) are preserved.
 
     Examples:
         cycode ai-guardrails uninstall                    # Remove user-level hooks
         cycode ai-guardrails uninstall --scope repo       # Remove repo-level hooks
-        cycode ai-guardrails uninstall --ide cursor       # Uninstall from Cursor IDE
-        cycode ai-guardrails uninstall --ide all          # Uninstall from all supported IDEs
+        cycode ai-guardrails uninstall --ide claude-code  # Uninstall from a specific IDE
+        cycode ai-guardrails uninstall --ide all          # Uninstall from every supported IDE
     """
-    # Validate inputs
     validate_scope(scope)
     repo_path = resolve_repo_path(scope, repo_path)
-    ide_type = validate_and_parse_ide(ide)
-
-    ides_to_uninstall: list[AIIDEType] = list(AIIDEType) if ide_type is None else [ide_type]
+    ides_to_uninstall = resolve_ides(ide)
 
     results: list[tuple[str, bool, str]] = []
     for current_ide in ides_to_uninstall:
-        ide_name = IDE_CONFIGS[current_ide].name
-        success, message = uninstall_hooks(scope, repo_path, ide=current_ide)
-        results.append((ide_name, success, message))
+        success, message = uninstall_hooks(current_ide, scope, repo_path)
+        results.append((current_ide.display_name, success, message))
 
-    # Report results for each IDE
     any_success = False
     all_success = True
-    for _ide_name, success, message in results:
+    for _name, success, message in results:
         if success:
             console.print(f'[green]✓[/] {message}')
             any_success = True

{cycode-3.15.3.dev7.dist-info → cycode-3.15.4.dev1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.15.3.dev7
+Version: 3.15.4.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE
@@ -62,6 +62,7 @@ This guide walks you through both installation and usage.
     2. [Available Options](#available-options)
     3. [MCP Tools](#mcp-tools)
     4. [Usage Examples](#usage-examples)
+    5. [Advanced Configuration](#advanced-configuration)
 5. [Platform Command](#platform-command-beta)
     1. [Discovering Commands](#discovering-commands)
     2. [Examples](#platform-examples)
@@ -600,6 +601,38 @@ cycode mcp -t streamable-http -H 127.0.0.2 -p 9000 &
 }
 ```
 
+### Advanced Configuration 
+##### Custom Certificates and Timeouts (Proxy Environments)
+
+If your organization uses a corporate proxy or a custom CA bundle for HTTPS inspection, you need to tell Cycode CLI (and the underlying Python TLS stack) where to find the trusted certificate bundle. You can also increase the MCP tool call timeout if scans are being cut short.
+
+| Environment Variable | Description |
+|----------------------|-------------|
+| `REQUESTS_CA_BUNDLE` | Path to a custom CA bundle file (`.pem` or `.crt`). Used by the `requests` library for all HTTPS calls made by Cycode CLI. |
+| `SSL_CERT_FILE`      | Path to a custom CA bundle file. Used by Python's low-level `ssl` module. Set this alongside `REQUESTS_CA_BUNDLE` for full coverage. |
+| `MCP_TOOL_TIMEOUT`   | Timeout (in seconds) that MCP clients such as Claude and GitHub Copilot wait for a tool call to complete. Increase this if long-running scans are being cut off before they finish. |
+
+> [!TIP]
+> Set both `REQUESTS_CA_BUNDLE` and `SSL_CERT_FILE` to the same CA bundle path. `REQUESTS_CA_BUNDLE` covers the HTTP layer; `SSL_CERT_FILE` covers the lower-level TLS layer. Using only one may still cause certificate errors in some environments.
+
+Example `mcp.json` configuration with custom certificates and a longer timeout:
+
+```json
+{
+  "mcpServers": {
+    "cycode": {
+      "command": "cycode",
+      "args": ["mcp"],
+      "env": {
+        "REQUESTS_CA_BUNDLE": "/path/to/your/corporate-ca-bundle.pem",
+        "SSL_CERT_FILE": "/path/to/your/corporate-ca-bundle.pem",
+        "MCP_TOOL_TIMEOUT": "1800"
+      }
+    }
+  }
+}
+```
+
 > [!NOTE]
 > The MCP server requires proper Cycode CLI authentication to function. Make sure you have authenticated using `cycode auth` or configured your credentials before starting the MCP server.
 
@@ -649,6 +682,8 @@ This information can be helpful when:
 - Identifying authentication problems
 - Debugging transport-specific issues
 
+### MCP Configuration
+
 
 # Platform Command \[BETA\]
 

{cycode-3.15.3.dev7.dist-info → cycode-3.15.4.dev1.dist-info}/RECORD

@@ -1,28 +1,29 @@
-cycode/__init__.py,sha256=XvbLa7dFUERdk8IUnLa6Bb3K2FbGOql-Ipx1O_kb6Ng,115
+cycode/__init__.py,sha256=UPgVpILY2bWvXK6Bul8uIehLpBu3njNwqn83H0Jz-wo,115
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=7ReEcVkRX9IaQ2I7jAj7Sl9smbtvxiuK8-9bitMEQik,7491
 cycode/cli/apps/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/apps/activation_manager.py,sha256=Hz9PDJFB-ZmYi4HSG8iYC-fR8j5v25VuUU-l95Otsdk,1678
 cycode/cli/apps/ai_guardrails/__init__.py,sha256=NsqB1Ca83BIjJMcDSt6suec6Ed0iNnacC0gBqkuuTtI,1367
-cycode/cli/apps/ai_guardrails/command_utils.py,sha256=itWoARiiqC-kCJuppBxBwKDjCSnci2m0EG95GQPy3r4,1924
-cycode/cli/apps/ai_guardrails/consts.py,sha256=hJ_P6OKtylrhcOsiLmsyRaL0kQ8YsDgmREP_xY8JTkk,4449
-cycode/cli/apps/ai_guardrails/hooks_manager.py,sha256=37IcEMCK60pQ8lnuy8GThlq9oeNOfETVp_xYGeJ9EpM,9428
-cycode/cli/apps/ai_guardrails/install_command.py,sha256=qlklts1Uj6j3urK6jwAWJY-L_DgVaZWuk7vZcpoKPAQ,4571
+cycode/cli/apps/ai_guardrails/command_utils.py,sha256=NVwd0-2RGRKIqhsQ-4LNDR1D0gVm_o7n-z5LxG2bqAo,800
+cycode/cli/apps/ai_guardrails/consts.py,sha256=Js2QtSNYG9Kt0eo3vepRd5TFciCeJHEC9NN18zqKvlE,620
+cycode/cli/apps/ai_guardrails/hooks_manager.py,sha256=dXrVMD_4CcN5aZNZetgtajJab0g4lVGW5ktoS7ALxzc,6864
+cycode/cli/apps/ai_guardrails/ides/__init__.py,sha256=1HgTyTmsX-JPGiYk1at7jbzlay6ASkKfA5RXo7K1_a8,1621
+cycode/cli/apps/ai_guardrails/ides/base.py,sha256=_KzOlD_tTU0HcZ-NaXc6NZ0Tn0ngLxqovQtY_Pcj5H4,5752
+cycode/cli/apps/ai_guardrails/ides/claude_code.py,sha256=YqgxV_kQ39LUlAA9fQbgQmWC7ALC1xMMaEVdsObZtEQ,14197
+cycode/cli/apps/ai_guardrails/ides/cursor.py,sha256=MnzhEgYYukTx7XVdNu-u5yO_PzOrZNteTIIEf0mymYc,5237
+cycode/cli/apps/ai_guardrails/install_command.py,sha256=vGZSIvHHVMS9_zhV_6lEhxqtmr5H6uykSq4AS5nxQYw,4278
 cycode/cli/apps/ai_guardrails/scan/__init__.py,sha256=qJc82XiQGiAuc1sYY8Ij_A-qXpxgLPuayQq8xWlouMA,48
-cycode/cli/apps/ai_guardrails/scan/claude_config.py,sha256=2hVuPHfT-9_kgf5yCNgN522IcporEZvJEyYTLaaae2c,5195
 cycode/cli/apps/ai_guardrails/scan/consts.py,sha256=drAslw6vW3kxmbCs2qPCUbUPR7PJouT2lsXtu5sD-lQ,1094
-cycode/cli/apps/ai_guardrails/scan/cursor_config.py,sha256=D4bQsTu6MFzJFhygk0QCyopy5gJMkJm0oRrWNt2PC0g,1087
-cycode/cli/apps/ai_guardrails/scan/handlers.py,sha256=7zxGQrePRJcs6kkpKnbYq59wM2ADKz70Ve_ZB5ZNRQE,15573
-cycode/cli/apps/ai_guardrails/scan/payload.py,sha256=WGvniNa0PuqgGoeNdpXGAYK6aJqOiaB38xNUYaL2CWk,10458
+cycode/cli/apps/ai_guardrails/scan/handlers.py,sha256=7hnawiQhH8rNKQ0DrSyzcy41C9YYeW7LYOJA1QUpkOM,14218
+cycode/cli/apps/ai_guardrails/scan/payload.py,sha256=pvT3UUqNMvdK3EVzzPjy4JMlOrF-WgxZ3fHN2AtN5eA,1126
 cycode/cli/apps/ai_guardrails/scan/policy.py,sha256=39s8hnxgjny1l6XAO59wsRcAlpW-LG00GUnO0PfqvuY,2566
-cycode/cli/apps/ai_guardrails/scan/response_builders.py,sha256=tVFJCnGdqSmyileg-idypOihygct7F6T4KHXYlX8y_c,4653
-cycode/cli/apps/ai_guardrails/scan/scan_command.py,sha256=_2fa6vz8ZmJlvCYrYNoWfX9fWrrpzcNCwL1UD-JxqLM,5618
-cycode/cli/apps/ai_guardrails/scan/types.py,sha256=H25MKJhAXmp7Mz1YeCIRmAY1Zg5GSpgBq8G1TEI9PFk,1868
+cycode/cli/apps/ai_guardrails/scan/scan_command.py,sha256=-Gl7cHELF1wlwLGno6ZVukFtK6NI6Z3-dTpIOsz8ors,6079
+cycode/cli/apps/ai_guardrails/scan/types.py,sha256=lDttkYFBfOkdMEEaRbq1IT2QTK0R-7Ht3T8vZdyB3b4,1038
 cycode/cli/apps/ai_guardrails/scan/utils.py,sha256=KVfX-NrcM-QW4quLtoNqfmz4GF0FlDs-TkqUOu1hAWM,2057
-cycode/cli/apps/ai_guardrails/session_start_command.py,sha256=fmRQLFFgE0IN9ATVA6dTvkfu-ZF40JRLVo2eAy7pfnk,5618
-cycode/cli/apps/ai_guardrails/status_command.py,sha256=UerHtjIGi6sY4RXGR06Es6jQFQAEWTx2Dvhk784WQIM,3539
-cycode/cli/apps/ai_guardrails/uninstall_command.py,sha256=0qhXNC4PQPqrtt5JmexcM4W6i-VyvObB3DQT_DINM1Q,2969
+cycode/cli/apps/ai_guardrails/session_start_command.py,sha256=z-yClXkV-SAxh5E8zKGIyo_qbhkpujoTgnx-lUDGS0I,3279
+cycode/cli/apps/ai_guardrails/status_command.py,sha256=Uqss68TEPCYPXpLix6Bh-4J3g-khxWsAqlIGYH5x4bQ,3203
+cycode/cli/apps/ai_guardrails/uninstall_command.py,sha256=dOmePfZmlHAPy2zEJM1yMtSuDqvzDwtqgmLKYK-T9PI,2698
 cycode/cli/apps/ai_remediation/__init__.py,sha256=8vYthY9RQeJqEni3AIF5sryz8n-XJQ6VNqG4aEFBAdY,553
 cycode/cli/apps/ai_remediation/ai_remediation_command.py,sha256=u1EdebaKCEmzv9fXmnIN0xDSLcCmGyjueYKvYfLOj_8,1549
 cycode/cli/apps/ai_remediation/apply_fix.py,sha256=9zgqiqF9HBQXi7Oz9ZIiANIAuKAMTji1PlNncCEOf5Q,817
@@ -204,8 +205,8 @@ cycode/cyclient/report_client.py,sha256=Scq30NeJPzgXv0hPLO1U05AdE9i_2iu6cIrSKpEJ
 cycode/cyclient/scan_client.py,sha256=6TK5FQkfrvV7PHqRnUzEn1PBNd2oPYVamvIixcUfe3c,16755
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=EfZGRK6VC5rE_LAjIcRrHFiQCueylCDXoG6bvGkrIME,2111
-cycode-3.15.3.dev7.dist-info/METADATA,sha256=d0aIuuYsyssqRrtQgXFQLzOS7y2gZe2zmKtnZabff_M,87415
-cycode-3.15.3.dev7.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-cycode-3.15.3.dev7.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.15.3.dev7.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.15.3.dev7.dist-info/RECORD,,
+cycode-3.15.4.dev1.dist-info/METADATA,sha256=zo-M7zLCUNGxECnRB06G7NpfNmynUAdahbN-tNa_0dI,89102
+cycode-3.15.4.dev1.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+cycode-3.15.4.dev1.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.15.4.dev1.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.15.4.dev1.dist-info/RECORD,,