lafine1211/roamswitch-mcp

Эта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал

0 stars 0 forks Качество 76 Тренд 20MIT

Read-only MCP server and detection logic from RoamSwitch (macOS network-security app) — a verifiable standalone mirror. MIT.

Обзор

The behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac's network boundary — published so you can read exactly what it computes and what it exposes to an AI client. This repository is a of the corresponding source in the RoamSwitch app. It is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually block traffic, no license or payment code, no UI. Just the code that observes and the code that answers questions over stdio. 33 tools (the length of toolDefinitions in MCPServer.swift, which is what tools/list returns). Every one is read-only. get_exposed_ports and the opt-in run_active_vuln_scan are pinned to 127.0.0.1; the one tool that contacts an external host is the opt-in, Pro-only run_npm_audit_signatures, which runs npm audit signatures against the npm registry.

README

Показан фрагмент оригинального README. Открыть оригинал.

roamswitch-mcp

English | 日本語

The MCP server and the detection logic behind RoamSwitch — a macOS menu-bar app that automatically defends your Mac’s network boundary — published so you can read exactly what it computes and what it exposes to an AI client.

This repository is a verifiable mirror of the corresponding source in the RoamSwitch app. It is not the app: no privileged helper, no packet-filter (pf) control, no guards that actually block traffic, no license or payment code, no UI. Just the code that observes and the code that answers questions over stdio.

What’s here

Area	Files
MCP stdio server (hand-rolled JSON-RPC 2.0)	`main.swift`, `MCPProtocol.swift`, `MCPServer.swift`, `MCPResponseFormatting.swift`
Network trust / gateway fingerprint	`TrustedNetwork.swift`, `GatewayFingerprint.swift`
ARP spoofing detection	`ARPSpoofMonitor.swift`
Listening-port enumeration & audit	`ListeningPortMonitor.swift`, `PortSecurityAuditor.swift`, `ServiceSignatures.swift`
Wi-Fi encryption check	`WiFiSecurityMonitor.swift`
22-point macOS security posture	`SecurityHealthChecker.swift`, `BackupRecency.swift`, `ProxyAutoDiscoveryCheck.swift`, `TrustAnchorCheck.swift`, `AgentCredentialFileCheck.swift`
Phishing / homograph / URL safety (offline)	`LinkSafetyAuditor.swift`
Secret / API-key leak scanning (offline)	`SecretLeakScanning.swift`
Unified-log security audit + log-template anomalies	`SecurityLogAuditor.swift`, `LogTemplateAnalyzer.swift`
Active vulnerability verification (`127.0.0.1` only, opt-in)	`ActiveVulnScan.swift`, `ActiveVulnCveMapData.swift`
Dependency source check, EPSS ranking, accepted-risk records	`DependencySourceScan.swift`, `PackageCveEpss.swift`, `VulnerabilityAcceptance.swift`
Local, network-free CVE matching (Homebrew + lockfiles)	`PackageCveScan.swift`, `PackageCveMapData.swift`, `PackageCveScanLanguages.swift`, `PackageCveMapLanguagesData.swift`
Guard state readers (quarantine, canary, port anomaly, runtime threat, notifications, containment timeline, network history)	`QuarantineManager.swift`, `CanaryStatusReader.swift`, `PortAnomalyStatusReader.swift`, `RuntimeThreatStatusReader.swift`, `NotificationHistory.swift`, `ContainmentIncidentTimeline.swift`, `NetworkHistoryGuard.swift`
Bundled knowledge base (`get_app_help`)	`RoamSwitchKnowledgeBase.swift`
Localization plumbing	`AppLanguage.swift`
Tests	`Tests/roamswitch-mcpTests/` — mirrored unit tests + `StdioSmokeTests.swift`

Tools exposed (`tools/list`)

Открыть полный README на GitHub

Установка

This server does not publish a one-line install command.

Open the repository installation guide Новичок в MCP? Начните с руководства на mcpskill.org →

Конфигурация

// Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "roamswitch": {
      "command": "/absolute/path/to/roamswitch-mcp/.build/release/roamswitch-mcp"
    }
  }
}