lafine1211/roamswitch-mcp
Developer tools이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기
Read-only MCP server and detection logic from RoamSwitch (macOS network-security app) — a verifiable standalone mirror. MIT.
개요
The behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac's network boundary — published so you can read exactly what it computes and what it exposes to an AI client. This repository is a of the corresponding source in the RoamSwitch app. It is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually block traffic, no license or payment code, no UI. Just the code that observes and the code that answers questions over stdio. 33 tools (the length of toolDefinitions in MCPServer.swift, which is what tools/list returns). Every one is read-only. get_exposed_ports and the opt-in run_active_vuln_scan are pinned to 127.0.0.1; the one tool that contacts an external host is the opt-in, Pro-only run_npm_audit_signatures, which runs npm audit signatures against the npm registry.
README
원문 README의 일부입니다. 원문 보기.
roamswitch-mcp
English | 日本語
The MCP server and the detection logic behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac’s network boundary — published so you can read exactly what it computes and what it exposes to an AI client.
This repository is a verifiable mirror of the corresponding source in the RoamSwitch app. It
is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually
block traffic, no license or payment code, no UI. Just the code that observes and the code that
answers questions over stdio.
What’s here
| Area | Files |
|---|---|
| MCP stdio server (hand-rolled JSON-RPC 2.0) | main.swift, MCPProtocol.swift, MCPServer.swift, MCPResponseFormatting.swift |
| Network trust / gateway fingerprint | TrustedNetwork.swift, GatewayFingerprint.swift |
| ARP spoofing detection | ARPSpoofMonitor.swift |
| Listening-port enumeration & audit | ListeningPortMonitor.swift, PortSecurityAuditor.swift, ServiceSignatures.swift |
| Wi-Fi encryption check | WiFiSecurityMonitor.swift |
| 22-point macOS security posture | SecurityHealthChecker.swift, BackupRecency.swift, ProxyAutoDiscoveryCheck.swift, TrustAnchorCheck.swift, AgentCredentialFileCheck.swift |
| Phishing / homograph / URL safety (offline) | LinkSafetyAuditor.swift |
| Secret / API-key leak scanning (offline) | SecretLeakScanning.swift |
| Unified-log security audit + log-template anomalies | SecurityLogAuditor.swift, LogTemplateAnalyzer.swift |
Active vulnerability verification (127.0.0.1 only, opt-in) |
ActiveVulnScan.swift, ActiveVulnCveMapData.swift |
| Dependency source check, EPSS ranking, accepted-risk records | DependencySourceScan.swift, PackageCveEpss.swift, VulnerabilityAcceptance.swift |
| Local, network-free CVE matching (Homebrew + lockfiles) | PackageCveScan.swift, PackageCveMapData.swift, PackageCveScanLanguages.swift, PackageCveMapLanguagesData.swift |
| Guard state readers (quarantine, canary, port anomaly, runtime threat, notifications, containment timeline, network history) | QuarantineManager.swift, CanaryStatusReader.swift, PortAnomalyStatusReader.swift, RuntimeThreatStatusReader.swift, NotificationHistory.swift, ContainmentIncidentTimeline.swift, NetworkHistoryGuard.swift |
Bundled knowledge base (get_app_help) |
RoamSwitchKnowledgeBase.swift |
| Localization plumbing | AppLanguage.swift |
| Tests | Tests/roamswitch-mcpTests/ — mirrored unit tests + StdioSmokeTests.swift |
Tools exposed (tools/list)
설치
This server does not publish a one-line install command.
Open the repository installation guide MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →설정
// Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"roamswitch": {
"command": "/absolute/path/to/roamswitch-mcp/.build/release/roamswitch-mcp"
}
}
}