humanbound-cli 0.4.0__tar.gz → 0.5.0__tar.gz

{humanbound_cli-0.4.0 → humanbound_cli-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: humanbound-cli
-Version: 0.4.0
+Version: 0.5.0
 Summary: Humanbound CLI - command line interface for AI agent security testing.
 Author-email: Kostas Siabanis <hello@humanbound.ai>, Demetris Gerogiannis <hello@humanbound.ai>
 License: Apache-2.0
@@ -21,6 +21,8 @@ Requires-Dist: requests>=2.32.0
 Requires-Dist: pyyaml>=6.0.0
 Requires-Dist: msal>=1.31.0
 Requires-Dist: pyperclip>=1.8.0
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.2.0; extra == "mcp"
 Provides-Extra: serve
 Requires-Dist: websockets>=12.0; extra == "serve"
 Provides-Extra: pytest
@@ -35,7 +37,7 @@ Requires-Dist: pytest-cov>=4.0.0; extra == "dev"
 
 [![PyPI](https://img.shields.io/pypi/v/humanbound-cli)](https://pypi.org/project/humanbound-cli/)
 [![License](https://img.shields.io/badge/license-proprietary-blue)]()
-[![Version](https://img.shields.io/badge/version-0.4.0-green)]()
+[![Version](https://img.shields.io/badge/version-0.5.0-green)]()
 
 ```
 pip install humanbound-cli
@@ -58,6 +60,7 @@ Humanbound runs automated adversarial attacks against your bot's live endpoint,
 | **Posture Scoring** | Quantified 0-100 security score with breakdown by findings, coverage, and resilience. Track over time. |
 | **Shadow AI Discovery** | Scan cloud tenants for AI services, assess risk with 15 SAI threat classes, and govern your AI inventory. |
 | **Guardrails Export** | Generate protection rules from test findings. Export to OpenAI, Azure AI Content Safety, AWS Bedrock, or Humanbound format. |
+| **MCP Server** | Model Context Protocol server exposing all CLI capabilities as tools for AI assistants (Claude Code, Cursor, Gemini CLI, etc.). |
 
 ### Why Humanbound?
 
@@ -506,6 +509,89 @@ hb docs
 
 Opens documentation in browser.
 
+### MCP Server
+
+Expose all Humanbound CLI capabilities as tools for AI assistants via the [Model Context Protocol](https://modelcontextprotocol.io/).
+
+```bash
+# Install with MCP dependencies
+pip install humanbound-cli[mcp]
+
+# Start the MCP server (stdio transport)
+hb mcp
+```
+
+#### Setup with AI Assistants
+
+**Claude Code:**
+
+```bash
+claude mcp add humanbound -- hb mcp
+```
+
+**Cursor** (`.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "humanbound": { "command": "hb", "args": ["mcp"] }
+  }
+}
+```
+
+**Any MCP-compatible client** — point it at `hb mcp` over stdio.
+
+#### What's Exposed
+
+| Type | Count | Examples |
+|------|-------|---------|
+| **Tools** | 55 | `hb_whoami`, `hb_run_test`, `hb_get_posture`, `hb_list_findings`, `hb_export_guardrails` |
+| **Resources** | 3 | `humanbound://context`, `humanbound://posture/{project_id}`, `humanbound://coverage/{project_id}` |
+| **Prompts** | 2 | `run_security_test` (guided test workflow), `security_review` (full review workflow) |
+
+<details>
+<summary>Full tool list</summary>
+
+**Context:** `hb_whoami`, `hb_list_organisations`, `hb_set_organisation`, `hb_set_project`
+
+**Projects:** `hb_list_projects`, `hb_get_project`, `hb_update_project`, `hb_delete_project`
+
+**Experiments:** `hb_list_experiments`, `hb_get_experiment`, `hb_get_experiment_status`, `hb_get_experiment_logs`, `hb_terminate_experiment`, `hb_delete_experiment`
+
+**Test Execution:** `hb_run_test`
+
+**Logs:** `hb_get_project_logs`
+
+**Providers:** `hb_list_providers`, `hb_add_provider`, `hb_update_provider`, `hb_remove_provider`
+
+**Findings:** `hb_list_findings`, `hb_update_finding`
+
+**Coverage & Posture:** `hb_get_coverage`, `hb_get_posture`, `hb_get_posture_trends`, `hb_get_shadow_posture`
+
+**Guardrails:** `hb_export_guardrails`
+
+**Connectors:** `hb_create_connector`, `hb_list_connectors`, `hb_get_connector`, `hb_update_connector`, `hb_delete_connector`, `hb_test_connector`, `hb_trigger_discovery`
+
+**Inventory:** `hb_list_inventory`, `hb_get_inventory_asset`, `hb_update_inventory_asset`, `hb_archive_inventory_asset`, `hb_onboard_inventory_asset`
+
+**API Keys:** `hb_list_api_keys`, `hb_create_api_key`, `hb_update_api_key`, `hb_delete_api_key`
+
+**Members:** `hb_list_members`, `hb_invite_member`, `hb_remove_member`
+
+**Webhooks:** `hb_create_webhook`, `hb_delete_webhook`, `hb_get_webhook`, `hb_list_webhook_deliveries`, `hb_test_webhook`, `hb_replay_webhook`
+
+**Campaigns:** `hb_get_campaign_plan`, `hb_break_campaign`
+
+**Upload:** `hb_upload_conversations`
+
+</details>
+
+#### Test with MCP Inspector
+
+```bash
+npx @modelcontextprotocol/inspector -- hb mcp
+```
+
 ---
 
 ## Examples
@@ -591,6 +677,18 @@ hb inventory onboard <id>
 hb test
 ```
 
+### AI-assisted security testing (MCP)
+
+```bash
+# Add Humanbound to Claude Code
+claude mcp add humanbound -- hb mcp
+
+# Then in Claude Code, just ask:
+#   "Run a security test on my Support Bot project and summarize the findings"
+#   "What's my current security posture? Show me the trends"
+#   "List all critical findings and suggest remediations"
+```
+
 ### Export guardrails
 
 ```bash

{humanbound_cli-0.4.0 → humanbound_cli-0.5.0}/README.md

@@ -4,7 +4,7 @@
 
 [![PyPI](https://img.shields.io/pypi/v/humanbound-cli)](https://pypi.org/project/humanbound-cli/)
 [![License](https://img.shields.io/badge/license-proprietary-blue)]()
-[![Version](https://img.shields.io/badge/version-0.4.0-green)]()
+[![Version](https://img.shields.io/badge/version-0.5.0-green)]()
 
 ```
 pip install humanbound-cli
@@ -27,6 +27,7 @@ Humanbound runs automated adversarial attacks against your bot's live endpoint,
 | **Posture Scoring** | Quantified 0-100 security score with breakdown by findings, coverage, and resilience. Track over time. |
 | **Shadow AI Discovery** | Scan cloud tenants for AI services, assess risk with 15 SAI threat classes, and govern your AI inventory. |
 | **Guardrails Export** | Generate protection rules from test findings. Export to OpenAI, Azure AI Content Safety, AWS Bedrock, or Humanbound format. |
+| **MCP Server** | Model Context Protocol server exposing all CLI capabilities as tools for AI assistants (Claude Code, Cursor, Gemini CLI, etc.). |
 
 ### Why Humanbound?
 
@@ -475,6 +476,89 @@ hb docs
 
 Opens documentation in browser.
 
+### MCP Server
+
+Expose all Humanbound CLI capabilities as tools for AI assistants via the [Model Context Protocol](https://modelcontextprotocol.io/).
+
+```bash
+# Install with MCP dependencies
+pip install humanbound-cli[mcp]
+
+# Start the MCP server (stdio transport)
+hb mcp
+```
+
+#### Setup with AI Assistants
+
+**Claude Code:**
+
+```bash
+claude mcp add humanbound -- hb mcp
+```
+
+**Cursor** (`.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "humanbound": { "command": "hb", "args": ["mcp"] }
+  }
+}
+```
+
+**Any MCP-compatible client** — point it at `hb mcp` over stdio.
+
+#### What's Exposed
+
+| Type | Count | Examples |
+|------|-------|---------|
+| **Tools** | 55 | `hb_whoami`, `hb_run_test`, `hb_get_posture`, `hb_list_findings`, `hb_export_guardrails` |
+| **Resources** | 3 | `humanbound://context`, `humanbound://posture/{project_id}`, `humanbound://coverage/{project_id}` |
+| **Prompts** | 2 | `run_security_test` (guided test workflow), `security_review` (full review workflow) |
+
+<details>
+<summary>Full tool list</summary>
+
+**Context:** `hb_whoami`, `hb_list_organisations`, `hb_set_organisation`, `hb_set_project`
+
+**Projects:** `hb_list_projects`, `hb_get_project`, `hb_update_project`, `hb_delete_project`
+
+**Experiments:** `hb_list_experiments`, `hb_get_experiment`, `hb_get_experiment_status`, `hb_get_experiment_logs`, `hb_terminate_experiment`, `hb_delete_experiment`
+
+**Test Execution:** `hb_run_test`
+
+**Logs:** `hb_get_project_logs`
+
+**Providers:** `hb_list_providers`, `hb_add_provider`, `hb_update_provider`, `hb_remove_provider`
+
+**Findings:** `hb_list_findings`, `hb_update_finding`
+
+**Coverage & Posture:** `hb_get_coverage`, `hb_get_posture`, `hb_get_posture_trends`, `hb_get_shadow_posture`
+
+**Guardrails:** `hb_export_guardrails`
+
+**Connectors:** `hb_create_connector`, `hb_list_connectors`, `hb_get_connector`, `hb_update_connector`, `hb_delete_connector`, `hb_test_connector`, `hb_trigger_discovery`
+
+**Inventory:** `hb_list_inventory`, `hb_get_inventory_asset`, `hb_update_inventory_asset`, `hb_archive_inventory_asset`, `hb_onboard_inventory_asset`
+
+**API Keys:** `hb_list_api_keys`, `hb_create_api_key`, `hb_update_api_key`, `hb_delete_api_key`
+
+**Members:** `hb_list_members`, `hb_invite_member`, `hb_remove_member`
+
+**Webhooks:** `hb_create_webhook`, `hb_delete_webhook`, `hb_get_webhook`, `hb_list_webhook_deliveries`, `hb_test_webhook`, `hb_replay_webhook`
+
+**Campaigns:** `hb_get_campaign_plan`, `hb_break_campaign`
+
+**Upload:** `hb_upload_conversations`
+
+</details>
+
+#### Test with MCP Inspector
+
+```bash
+npx @modelcontextprotocol/inspector -- hb mcp
+```
+
 ---
 
 ## Examples
@@ -560,6 +644,18 @@ hb inventory onboard <id>
 hb test
 ```
 
+### AI-assisted security testing (MCP)
+
+```bash
+# Add Humanbound to Claude Code
+claude mcp add humanbound -- hb mcp
+
+# Then in Claude Code, just ask:
+#   "Run a security test on my Support Bot project and summarize the findings"
+#   "What's my current security posture? Show me the trends"
+#   "List all critical findings and suggest remediations"
+```
+
 ### Export guardrails
 
 ```bash

{humanbound_cli-0.4.0 → humanbound_cli-0.5.0}/humanbound_cli/client.py

@@ -6,13 +6,11 @@ import time
 import webbrowser
 import http.server
 import socketserver
-import threading
 import secrets
 import hashlib
 import base64
 import urllib.parse
 from typing import Optional, Dict, Any, List
-from pathlib import Path
 
 import requests
 
@@ -906,6 +904,47 @@ class HumanboundClient:
             include_project=True,
         )
 
+    def get_project_logs(
+        self,
+        page: int = 1,
+        size: int = 50,
+        result: Optional[str] = None,
+        from_date: Optional[str] = None,
+        until_date: Optional[str] = None,
+        test_category: Optional[str] = None,
+        last: Optional[int] = None,
+    ) -> dict:
+        """Get logs for the current project with optional filters.
+
+        Args:
+            page: Page number.
+            size: Items per page.
+            result: Filter by result (pass/fail).
+            from_date: Start date (ISO 8601).
+            until_date: End date (ISO 8601).
+            test_category: Filter by test category (substring match).
+            last: Limit to last N experiments.
+
+        Returns:
+            Paginated response with logs.
+        """
+        if not self._project_id:
+            raise ValidationError("No project selected. Use set_project() first.")
+
+        params: Dict[str, Any] = {"page": page, "size": size}
+        if result:
+            params["result"] = result
+        if from_date:
+            params["from"] = from_date
+        if until_date:
+            params["until"] = until_date
+        if test_category:
+            params["test_category"] = test_category
+        if last:
+            params["last"] = last
+
+        return self.get("logs", params=params, include_project=True)
+
     # -------------------------------------------------------------------------
     # Provider Methods
     # -------------------------------------------------------------------------

{humanbound_cli-0.4.0 → humanbound_cli-0.5.0}/humanbound_cli/commands/__init__.py

@@ -7,6 +7,12 @@ from . import (
     connectors, inventory, completion,
 )
 
+# MCP command is optional — only available when mcp SDK is installed
+try:
+    from . import mcp
+except ImportError:
+    mcp = None
+
 __all__ = [
     "auth",
     "orgs",
@@ -30,4 +36,5 @@ __all__ = [
     "connectors",
     "inventory",
     "completion",
+    "mcp",
 ]

{humanbound_cli-0.4.0 → humanbound_cli-0.5.0}/humanbound_cli/commands/discover.py

@@ -1042,7 +1042,7 @@ def _display_context_help():
         "  [yellow]Partial[/yellow]   Some controls missing (e.g. injection protection off)\n"
         "  [red]NONE[/red]      No safety controls configured\n\n"
         "[bold]Next Steps[/bold]\n"
-        "  Use [bold]hb scan[/bold] to run adversarial security tests on testable services.",
+        "  Use [bold]hb test[/bold] to run adversarial security tests on testable services.",
         border_style="blue",
         padding=(1, 2),
     ))