Drift는 Locally-installed AI CLI 도구를 실행합니다 (Claude Code, Gemini CLI, Codex CLI, Copilot CLI) 내장된 MCP 서버를 통해 Caido 세션에 대한 실시간 액세스.

** API 키가 필요 없습니다 ** - Drift는 CLI 도구를 사용하여 기계에 이미 인증되었습니다. 모든 채팅 턴은 로컬 CLI에 대해 실행합니다. 트래픽은 원격 LLM 호스팅 서비스에 대한 상자를 결코 남지 않습니다.

특징

-4 CLI 백엔드: Claude Code ( 세션 재시작), Gemini CLI, Codex CLI, Copilot CLI

• MCP 도구: 18 Caido 도구는 stdio를 통해 모든 공급자에 노출
• **Caido 통합 **: 명령 팔레트, 요청/responses의 컨텍스트 메뉴 (“Review Request”, “Build Test Plan”, “Review Response”, “Inspect JavaScript”)
• Structured HTTP handoff: 분석 작업은 표시된 프롬프트를 단축 유지하고 별도의 채팅 첨부 파일로 raw request/response 자료를 첨부합니다. -Context 가시성: 헤더는 현재 Caido UI 컨텍스트를 보여준다. -Tool safety: per-group는 민감한 MCP 행동(send_request], create_finding], set_environment], 인터셉트, run_workflow)에 대한 선택적 확인을 가능하게 합니다

Drift - Security copilot / MCP assistant for Caido

Drift runs locally-installed AI CLI tools (Claude Code, Gemini CLI, Codex CLI, Copilot CLI) inside Caido with live access to your Caido session via an embedded MCP server.

No API keys needed — Drift uses CLI tools already authenticated on your machine. Every chat turn runs against a local CLI; traffic never leaves your box for a remote LLM-hosting service.

Features

• 4 CLI backends: Claude Code (with session resume), Gemini CLI, Codex CLI, Copilot CLI
• MCP tools: 18 Caido tools exposed to every provider via stdio
• Caido integration: command palette, context menus on requests/responses (“Review Request”, “Build Test Plan”, “Review Response”, “Inspect JavaScript”)
• Structured HTTP handoff: analysis actions keep the visible prompt short and attach raw request/response material as a separate chat attachment
• Context visibility: the header shows the current Caido UI context plus any explicit MCP project override
• Tool safety: per-group enables plus optional confirmation for sensitive MCP actions (send_request, create_finding, set_environment, intercept controls, run_workflow)
• MCP activity trace: assistant replies show which Caido tools were called and how they ended
• Live MCP test: Settings can verify tool discovery plus live get_environment and search_history calls before you trust a provider session
• Chat persistence: conversations saved via SQLite with JSON backup; persistence failures surfaced rather than silently swallowed
• Streaming output with real cancellation, a spawn-time timeout watchdog, and per-chat session lifecycle status
• Cancel-safe turns: pressing Stop never duplicates the assistant message even if the provider resolves after SIGTERM
• Context-menu queue: a context-menu action fired while another turn is streaming is queued with a toast, drained when the current turn finishes, and cleared if you press Stop
• In-app Help tab: prerequisites, setup walkthrough, troubleshooting, prompt examples
• Diagnostics report: one-click copy/download of a redacted diagnostics bundle for bug reports
• Session debug log (opt-in): a checkbox in Settings > Process streams per-session provider lifecycle events to /tmp/drift-session-.log and deletes the file when the session ends

Installation

pnpm install
pnpm build

Install dist/drift.zip in Caido via Plugins > Install from file.

Configuration

CLI Providers