lafine1211/roamswitch-mcp

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

0 stars 0 forks 品質 76 トレンド 20MIT

Read-only MCP server and detection logic from RoamSwitch (macOS network-security app) — a verifiable standalone mirror. MIT.

概要

The behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac's network boundary — published so you can read exactly what it computes and what it exposes to an AI client. This repository is a of the corresponding source in the RoamSwitch app. It is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually block traffic, no license or payment code, no UI. Just the code that observes and the code that answers questions over stdio. 33 tools (the length of toolDefinitions in MCPServer.swift, which is what tools/list returns). Every one is read-only. get_exposed_ports and the opt-in run_active_vuln_scan are pinned to 127.0.0.1; the one tool that contacts an external host is the opt-in, Pro-only run_npm_audit_signatures, which runs npm audit signatures against the npm registry.

README

以下は原文 README の抜粋です。原文を見る。

roamswitch-mcp

English | 日本語

The MCP server and the detection logic behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac’s network boundary — published so you can read exactly what it computes and what it exposes to an AI client.

This repository is a verifiable mirror of the corresponding source in the RoamSwitch app. It is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually block traffic, no license or payment code, no UI. Just the code that observes and the code that answers questions over stdio.

What’s here

Area	Files
MCP stdio server (hand-rolled JSON-RPC 2.0)	`main.swift`, `MCPProtocol.swift`, `MCPServer.swift`, `MCPResponseFormatting.swift`
Network trust / gateway fingerprint	`TrustedNetwork.swift`, `GatewayFingerprint.swift`
ARP spoofing detection	`ARPSpoofMonitor.swift`
Listening-port enumeration & audit	`ListeningPortMonitor.swift`, `PortSecurityAuditor.swift`, `ServiceSignatures.swift`
Wi-Fi encryption check	`WiFiSecurityMonitor.swift`
22-point macOS security posture	`SecurityHealthChecker.swift`, `BackupRecency.swift`, `ProxyAutoDiscoveryCheck.swift`, `TrustAnchorCheck.swift`, `AgentCredentialFileCheck.swift`
Phishing / homograph / URL safety (offline)	`LinkSafetyAuditor.swift`
Secret / API-key leak scanning (offline)	`SecretLeakScanning.swift`
Unified-log security audit + log-template anomalies	`SecurityLogAuditor.swift`, `LogTemplateAnalyzer.swift`
Active vulnerability verification (`127.0.0.1` only, opt-in)	`ActiveVulnScan.swift`, `ActiveVulnCveMapData.swift`
Dependency source check, EPSS ranking, accepted-risk records	`DependencySourceScan.swift`, `PackageCveEpss.swift`, `VulnerabilityAcceptance.swift`
Local, network-free CVE matching (Homebrew + lockfiles)	`PackageCveScan.swift`, `PackageCveMapData.swift`, `PackageCveScanLanguages.swift`, `PackageCveMapLanguagesData.swift`
Guard state readers (quarantine, canary, port anomaly, runtime threat, notifications, containment timeline, network history)	`QuarantineManager.swift`, `CanaryStatusReader.swift`, `PortAnomalyStatusReader.swift`, `RuntimeThreatStatusReader.swift`, `NotificationHistory.swift`, `ContainmentIncidentTimeline.swift`, `NetworkHistoryGuard.swift`
Bundled knowledge base (`get_app_help`)	`RoamSwitchKnowledgeBase.swift`
Localization plumbing	`AppLanguage.swift`
Tests	`Tests/roamswitch-mcpTests/` — mirrored unit tests + `StdioSmokeTests.swift`

Tools exposed (`tools/list`)

GitHub で README 全文を見る

インストール

This server does not publish a one-line install command.

Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →

設定

// Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "roamswitch": {
      "command": "/absolute/path/to/roamswitch-mcp/.build/release/roamswitch-mcp"
    }
  }
}