{"id":29154790,"url":"https://github.com/ricauts/cybermcp","last_synced_at":"2025-07-01T02:35:08.954Z","repository":{"id":285548890,"uuid":"958514409","full_name":"ricauts/CyberMCP","owner":"ricauts","description":"CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be used by LLMs to identify common security issues in APIs.","archived":false,"fork":false,"pushed_at":"2025-05-28T05:19:08.000Z","size":165,"stargazers_count":8,"open_issues_count":2,"forks_count":3,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-17T13:19:28.477Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ricauts.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-04-01T10:18:49.000Z","updated_at":"2025-06-02T03:12:50.000Z","dependencies_parsed_at":null,"dependency_job_id":"bb2d173c-c6e6-4622-9dc8-d538d413502d","html_url":"https://github.com/ricauts/CyberMCP","commit_stats":null,"previous_names":["ricauts/cybermcp"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/ricauts/CyberMCP","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricauts%2FCyberMCP","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricauts%2FCyberMCP/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricauts%2FCyberMCP/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricauts%2FCyberMCP/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ricauts","download_url":"https://codeload.github.com/ricauts/CyberMCP/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ricauts%2FCyberMCP/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262884268,"owners_count":23379363,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-07-01T02:34:18.211Z","updated_at":"2025-07-01T02:35:08.944Z","avatar_url":"https://github.com/ricauts.png","language":"TypeScript","funding_links":[],"categories":["Testing \u0026 Debugging Tools","Security"],"sub_categories":["How to Submit"],"readme":"# 🔒 CyberMCP\n\n**AI-powered Cybersecurity API Testing with Model Context Protocol (MCP)**\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![Node.js](https://img.shields.io/badge/Node.js-18%2B-green.svg)](https://nodejs.org/)\n[![TypeScript](https://img.shields.io/badge/TypeScript-5.4%2B-blue.svg)](https://www.typescriptlang.org/)\n\nCyberMCP is a Model Context Protocol (MCP) server that enables AI agents to perform comprehensive security testing on backend APIs. It provides 14 specialized security tools and 10 resources for identifying vulnerabilities like authentication bypass, injection attacks, data leakage, and security misconfigurations.\n\n## 🚀 Quick Start\n\n```bash\n# Clone and setup\ngit clone https://github.com/your-username/CyberMCP.git\ncd CyberMCP\nnpm install\nnpm run build\n\n# Test the server\nnpm run test-server\n\n# Start interactive testing\nnpm run test-interactive\n```\n\n## ✨ Features\n\n- **🔐 Authentication Testing** - JWT analysis, bypass detection, OAuth2 flows\n- **💉 Injection Testing** - SQL injection, XSS vulnerability detection  \n- **📊 Data Protection** - Sensitive data exposure, path traversal checks\n- **⏱️ Rate Limiting** - DoS vulnerability assessment\n- **🛡️ Security Headers** - OWASP security header validation\n- **📚 Comprehensive Resources** - Security checklists and testing guides\n\n## 🛠️ Security Tools (14 Total)\n\n| Category | Tools |\n|----------|-------|\n| **Authentication** | `basic_auth`, `token_auth`, `oauth2_auth`, `api_login`, `auth_status`, `clear_auth`, `jwt_vulnerability_check`, `auth_bypass_check` |\n| **Injection Testing** | `sql_injection_check`, `xss_check` |\n| **Data Protection** | `sensitive_data_check`, `path_traversal_check` |\n| **Infrastructure** | `rate_limit_check`, `security_headers_check` |\n\n## 🎯 IDE Integration\n\nCyberMCP works with all major AI-powered IDEs:\n\n- **Claude Desktop** - Direct MCP integration\n- **Cursor IDE** - Built-in MCP support  \n- **Windsurf (Codeium)** - Native MCP protocol\n- **VS Code + Cline** - Extension-based integration\n\n\u003e 📖 **[Complete Setup Guide](docs/SETUP_GUIDE.md)** - Detailed configuration for each IDE\n\n## 📋 Usage Example\n\n```text\n\"Use basic_auth with username 'admin' and password 'secret123' \nthen use auth_bypass_check on https://api.example.com/users \nto test for authentication bypass vulnerabilities\"\n```\n\nThe AI agent will:\n1. Configure authentication credentials\n2. Test the protected endpoint for bypass vulnerabilities  \n3. Provide detailed security analysis and recommendations\n\n## 📊 Testing \u0026 Validation\n\n```bash\n# Comprehensive tool testing\nnpm run test-tools\n\n# Manual interactive testing  \nnpm run test-interactive\n\n# Quick setup verification\nnpm run quick-start\n\n# MCP Inspector (GUI)\nnpm run inspector\n```\n\n## 📁 Project Structure\n\n```\nCyberMCP/\n├── src/                    # TypeScript source code\n│   ├── tools/             # 14 security testing tools\n│   ├── resources/         # Security checklists \u0026 guides\n│   └── utils/             # Authentication \u0026 utilities\n├── docs/                  # Documentation\n├── scripts/               # Testing \u0026 utility scripts  \n├── examples/              # Configuration examples\n├── dist/                  # Built JavaScript (generated)\n└── README.md              # This file\n```\n\n## 🔧 Development\n\n```bash\n# Development mode with hot reload\nnpm run dev\n\n# Build TypeScript\nnpm run build\n\n# Start server (stdio mode)\nnpm start\n\n# Start HTTP server\nTRANSPORT=http PORT=3000 npm start\n```\n\n## 📖 Documentation\n\n- **[Setup Guide](docs/SETUP_GUIDE.md)** - Detailed installation and configuration\n- **[Project Summary](docs/PROJECT_SUMMARY.md)** - Complete feature overview\n- **[Testing Results](docs/TESTING_RESULTS.md)** - Validation and test coverage\n\n## 🤝 Contributing\n\n1. Fork the repository\n2. Create a feature branch: `git checkout -b feature/new-security-tool`\n3. Make your changes and add tests\n4. Submit a pull request\n\n## 📄 License\n\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.\n\n## 🔗 Resources\n\n- [Model Context Protocol](https://modelcontextprotocol.io/) - Official MCP documentation\n- [OWASP API Security](https://owasp.org/www-project-api-security/) - API security best practices\n- [MCP TypeScript SDK](https://github.com/modelcontextprotocol/typescript-sdk) - Development framework\n\n---\n\n**🔒 Secure your APIs with AI-powered testing!**\n\n*For support and questions, please [create an issue](https://github.com/your-username/CyberMCP/issues).* ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fricauts%2Fcybermcp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fricauts%2Fcybermcp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fricauts%2Fcybermcp/lists"}