kg-mcp 0.1.8__py3-none-any.whl

kg_mcp/security/origin.py

@@ -0,0 +1,112 @@
+"""
+Origin validation middleware for MCP server.
+Prevents DNS rebinding attacks by validating Origin headers.
+"""
+
+import fnmatch
+import logging
+from typing import Callable, List, Optional
+
+from kg_mcp.config import get_settings
+
+logger = logging.getLogger(__name__)
+
+
+class OriginValidationError(Exception):
+    """Raised when origin validation fails."""
+
+    pass
+
+
+def validate_origin(origin: Optional[str], allowed_origins: List[str]) -> bool:
+    """
+    Validate if an origin is allowed.
+
+    Args:
+        origin: The Origin header value
+        allowed_origins: List of allowed origin patterns (supports wildcards)
+
+    Returns:
+        True if the origin is allowed
+    """
+    if not origin:
+        # No origin header - might be a same-origin request or non-browser client
+        # For MCP servers, we typically allow this
+        return True
+
+    if not allowed_origins:
+        # No allowlist configured - only allow localhost by default
+        allowed_origins = ["http://localhost:*", "http://127.0.0.1:*"]
+
+    for pattern in allowed_origins:
+        if fnmatch.fnmatch(origin, pattern):
+            return True
+
+    return False
+
+
+def create_origin_middleware() -> Callable:
+    """
+    Create an origin validation middleware function.
+
+    Returns:
+        A middleware function that validates Origin headers
+    """
+
+    async def origin_middleware(request, call_next):
+        """Middleware to validate Origin headers."""
+        settings = get_settings()
+        allowed_origins = settings.allowed_origins_list
+
+        origin = request.headers.get("origin")
+
+        if not validate_origin(origin, allowed_origins):
+            logger.warning(
+                f"Rejected request with disallowed origin: {origin} "
+                f"(allowed: {allowed_origins})"
+            )
+            from starlette.responses import JSONResponse
+
+            return JSONResponse(
+                status_code=403,
+                content={"error": f"Origin '{origin}' is not allowed"},
+            )
+
+        # Add CORS headers for allowed origins
+        response = await call_next(request)
+
+        if origin and validate_origin(origin, allowed_origins):
+            response.headers["Access-Control-Allow-Origin"] = origin
+            response.headers["Access-Control-Allow-Credentials"] = "true"
+            response.headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS"
+            response.headers["Access-Control-Allow-Headers"] = "Authorization, Content-Type"
+
+        return response
+
+    return origin_middleware
+
+
+def is_localhost(host: str) -> bool:
+    """
+    Check if a host is localhost.
+
+    Args:
+        host: The host to check
+
+    Returns:
+        True if localhost
+    """
+    localhost_patterns = [
+        "localhost",
+        "127.0.0.1",
+        "::1",
+        "[::1]",
+    ]
+
+    # Strip port if present
+    if ":" in host and not host.startswith("["):
+        host = host.split(":")[0]
+    elif host.startswith("[") and "]:" in host:
+        host = host.split("]:")[0] + "]"
+
+    return host.lower() in localhost_patterns

kg_mcp/utils.py

@@ -0,0 +1,100 @@
+"""
+Utility functions for the KG-MCP server.
+"""
+
+import json
+from datetime import datetime, date, time
+from typing import Any, Dict, List, Union
+
+
+def serialize_neo4j_value(value: Any) -> Any:
+    """
+    Recursively serialize Neo4j values to JSON-compatible types.
+    
+    Handles:
+    - neo4j.time.DateTime -> ISO string
+    - neo4j.time.Date -> ISO string  
+    - neo4j.time.Time -> ISO string
+    - neo4j.time.Duration -> dict
+    - neo4j.spatial.Point -> dict
+    - nested dicts and lists
+    """
+    if value is None:
+        return None
+    
+    # Handle Neo4j DateTime types
+    type_name = type(value).__name__
+    module_name = type(value).__module__
+    
+    if module_name.startswith('neo4j'):
+        # Neo4j DateTime
+        if type_name == 'DateTime':
+            return value.isoformat()
+        # Neo4j Date
+        elif type_name == 'Date':
+            return value.isoformat()
+        # Neo4j Time
+        elif type_name == 'Time':
+            return value.isoformat()
+        # Neo4j Duration
+        elif type_name == 'Duration':
+            return {
+                'months': value.months,
+                'days': value.days,
+                'seconds': value.seconds,
+                'nanoseconds': value.nanoseconds,
+            }
+        # Neo4j Point
+        elif type_name == 'Point':
+            return {
+                'srid': value.srid,
+                'x': value.x,
+                'y': value.y,
+                'z': getattr(value, 'z', None),
+            }
+        # Other Neo4j types - convert to string
+        else:
+            return str(value)
+    
+    # Handle Python datetime types
+    if isinstance(value, datetime):
+        return value.isoformat()
+    if isinstance(value, date):
+        return value.isoformat()
+    if isinstance(value, time):
+        return value.isoformat()
+    
+    # Handle dict - recursively serialize
+    if isinstance(value, dict):
+        return {k: serialize_neo4j_value(v) for k, v in value.items()}
+    
+    # Handle list - recursively serialize
+    if isinstance(value, (list, tuple)):
+        return [serialize_neo4j_value(v) for v in value]
+    
+    # Handle sets
+    if isinstance(value, set):
+        return [serialize_neo4j_value(v) for v in value]
+    
+    # Handle bytes
+    if isinstance(value, bytes):
+        return value.decode('utf-8', errors='replace')
+    
+    # Return primitives as-is
+    return value
+
+
+def serialize_response(data: Dict[str, Any]) -> Dict[str, Any]:
+    """
+    Serialize a complete response dictionary for JSON output.
+    
+    Use this to wrap tool responses before returning.
+    """
+    return serialize_neo4j_value(data)
+
+
+class Neo4jJSONEncoder(json.JSONEncoder):
+    """Custom JSON encoder that handles Neo4j types."""
+    
+    def default(self, obj):
+        return serialize_neo4j_value(obj)

kg_mcp-0.1.8.dist-info/METADATA

@@ -0,0 +1,86 @@
+Metadata-Version: 2.4
+Name: kg-mcp
+Version: 0.1.8
+Summary: Memory/Knowledge Graph MCP Server for IDE Assistants - Persistent context and knowledge for AI coding agents
+Project-URL: Homepage, https://github.com/Hexecu/mcp-neuralmemory
+Project-URL: Documentation, https://github.com/Hexecu/mcp-neuralmemory#readme
+Project-URL: Repository, https://github.com/Hexecu/mcp-neuralmemory
+Project-URL: Issues, https://github.com/Hexecu/mcp-neuralmemory/issues
+Author: Davide Leopardi
+License: MIT
+Keywords: ai-assistant,gemini,knowledge-graph,llm,mcp,model-context-protocol,neo4j
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.11
+Requires-Dist: google-auth>=2.0.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: litellm>=1.40.0
+Requires-Dist: mcp>=1.0.0
+Requires-Dist: neo4j>=5.0.0
+Requires-Dist: pydantic-settings>=2.0.0
+Requires-Dist: pydantic>=2.0.0
+Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: uvicorn>=0.30.0
+Provides-Extra: dev
+Requires-Dist: black>=24.0.0; extra == 'dev'
+Requires-Dist: mypy>=1.10.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
+Requires-Dist: pytest-cov>=4.0.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.4.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# MCP-KG-Memory Server
+
+Python MCP server implementation with Neo4j backend.
+
+## Development Setup
+
+```bash
+# Create virtual environment
+python -m venv .venv
+source .venv/bin/activate
+
+# Install dependencies (including dev)
+pip install -e ".[dev]"
+
+# Run tests
+pytest tests/ -v
+
+# Run server
+python -m kg_mcp.main
+```
+
+## Project Structure
+
+```
+src/kg_mcp/
+├── main.py           # Entry point
+├── config.py         # Settings management
+├── llm/              # LLM integration
+│   ├── client.py     # LiteLLM wrapper
+│   ├── schemas.py    # Pydantic models
+│   └── prompts/      # Prompt templates
+├── kg/               # Knowledge graph
+│   ├── neo4j.py      # Driver/client
+│   ├── schema.cypher # DB schema
+│   ├── repo.py       # Query repository
+│   ├── ingest.py     # Ingestion pipeline
+│   └── retrieval.py  # Context builder
+├── mcp/              # MCP components
+│   ├── tools.py      # Tool definitions
+│   ├── resources.py  # Resource handlers
+│   └── prompts.py    # Prompt templates
+├── codegraph/        # Code indexing (V1)
+│   ├── model.py      # Data models
+│   └── indexer.py    # File indexer
+└── security/         # Auth/Origin
+    ├── auth.py       # Token validation
+    └── origin.py     # Origin checking
+```

kg_mcp-0.1.8.dist-info/RECORD

@@ -0,0 +1,36 @@
+kg_mcp/__init__.py,sha256=f35x5yllOVTBCMOsJcgesmoze7bM5UTiOlTSMZU61-U,80
+kg_mcp/__main__.py,sha256=3djAWBOOTYfXvFPnAfwe2UWkKkYHBUVHlPJjaMXNWrY,135
+kg_mcp/config.py,sha256=9ryFQLG28B_v-PGv-D_2ojm5oU2EhNFxbq4qAv_hOyM,3479
+kg_mcp/main.py,sha256=oprRN_yyZ5QIHOivYr923xl-_BWzizKvXEAOgtin-hg,5614
+kg_mcp/utils.py,sha256=_4DlV2PtftJjR5Ak4lFzxdNuIrbyczIVenWhqKkX5zk,2810
+kg_mcp/cli/__init__.py,sha256=-i85AHO1gqjeqEYqIkSjfW9Ik0LWbhrTPuhUCIk7eD4,60
+kg_mcp/cli/setup.py,sha256=1d4jmR6Tuaf9kGNQWOcmrCoIMqeH3rMYZGDdBLdH39s,44376
+kg_mcp/cli/status.py,sha256=0-_CiISA5maBgliQXl6S7B5WfpEc8nUuQI6S1QE_mLk,12651
+kg_mcp/codegraph/__init__.py,sha256=Erh3mMg5FlbN0kzMJAzCpizcrjrNX0LuZHawKOECskE,68
+kg_mcp/codegraph/indexer.py,sha256=H-QTMmrLsgzL4jXzhgLUagFGUyDfkm9cX-B-9ip_7TA,9130
+kg_mcp/codegraph/model.py,sha256=qupXdrkHC4FQZGYE0Haw93AWdDWPsyuTND2jlMOFjWM,3853
+kg_mcp/kg/__init__.py,sha256=2lueX_bq3H6sjh5DgRzSVWOAuzftzq7vz8NlCLsY1BE,56
+kg_mcp/kg/apply_schema.py,sha256=iJNiLmSqmhOXVeS5bgNO_tSFIZi38fZfhSchmDtc_Gs,2715
+kg_mcp/kg/ingest.py,sha256=KdLUlweATYiwBVOuyxMjGmLh04fXUky9QSO1fkgtTr8,9239
+kg_mcp/kg/neo4j.py,sha256=ZvD45aChmuFH3Ns7i8OmTz0mrnmbscvIaZlTRa_-7hw,4761
+kg_mcp/kg/repo.py,sha256=ASuKwsBLTel3toshScsNFC0F-0_8wvkV2PJ9p7s_dac,27164
+kg_mcp/kg/retrieval.py,sha256=oFxVvGFCCC2jto6EBDMcXenkJq_LIln_5P9q3Lk6X-Y,9032
+kg_mcp/kg/schema.cypher,sha256=r6BMg-fKhJxHREqaeHnxp2X3MknbTY8vJ96e2UUVPn4,5887
+kg_mcp/llm/__init__.py,sha256=ewfvU-0Mxw8P2s774DsI8t9PkFNh78WeO58FqwsTOwY,88
+kg_mcp/llm/client.py,sha256=OEwig8uE_MZeUvsZPUKZUEvZFVetA5mPIffbx42PUQM,10535
+kg_mcp/llm/schemas.py,sha256=F4LQM7a5PMBoL3LQEP80LlPgcB7bfHoDV3nK2mbBJbw,8554
+kg_mcp/llm/prompts/__init__.py,sha256=rMw7FCXH-pK_X759NlDpghKLvIt5hGk6p_1bOIw8klg,221
+kg_mcp/llm/prompts/extractor.py,sha256=3gBq0f3YLKtEHwjOLjMxQYDu_yUi1SEoleiYiZ_79Uc,3692
+kg_mcp/llm/prompts/linker.py,sha256=Cv0sR2hFbOf58_C8bEbVOmZPDV8vOVUBwa01dU5mpiU,3931
+kg_mcp/mcp/__init__.py,sha256=HIdA5ozqK0A6JDcQpItt4M73_nk52PkdqYAorlgaiUE,57
+kg_mcp/mcp/change_schemas.py,sha256=mWso9c26556O-8VaFfHLc1lvibouyT6IxRSVLTuzUE8,4891
+kg_mcp/mcp/prompts.py,sha256=qbRwyM834gKFxwJlcsXH9eSdCrGXVmlyPDaJPb6VR6c,5546
+kg_mcp/mcp/resources.py,sha256=H7hVC8bMqYUKB7e8T-kaSVoVI4JlA5nKhmlQuxC3j2w,8502
+kg_mcp/mcp/tools.py,sha256=8CpBsO-_y7rW6wRb00NQJ73ENqgj7rUwzi76QGmKqZA,20172
+kg_mcp/security/__init__.py,sha256=zvxT3XvZQLqMaj1IiKOYXlQDmQrolXpEErn8-LSe-a8,65
+kg_mcp/security/auth.py,sha256=4GLUguNnlvwA8G1cAjbQlMvndyJYxecEv1REQFnhk4s,3218
+kg_mcp/security/origin.py,sha256=fRm-w_URkT7sF0D8aRnt3xXXXkfYREBAydHKdrTrbtg,3068
+kg_mcp-0.1.8.dist-info/METADATA,sha256=Wkbq5TbXdVmHxZn81I0FfK3ddpxminN0RMMxZAY3E7o,3026
+kg_mcp-0.1.8.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+kg_mcp-0.1.8.dist-info/entry_points.txt,sha256=rWKJ-LdGRIRnTAALNI0ZJ7H1Nclnn8C76OLwt3QjUiE,120
+kg_mcp-0.1.8.dist-info/RECORD,,

kg_mcp-0.1.8.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.28.0
+Root-Is-Purelib: true
+Tag: py3-none-any

kg_mcp-0.1.8.dist-info/entry_points.txt

@@ -0,0 +1,4 @@
+[console_scripts]
+kg-mcp = kg_mcp.main:main
+kg-mcp-setup = kg_mcp.cli.setup:main
+kg-mcp-status = kg_mcp.cli.status:main