Drift在Caido内部运行本地安装的AI指令行工具（Claude Code、Gemini CLI、Codex CLI、Copilot CLI），并通过嵌入式MCP服务器实时访问您的Caido会话。

无需API密钥——Drift使用已在你机器上认证的CLI工具。每次聊天回合都运行本地CLI;流量绝不会离开你的设备，前往远程LLM托管服务。

特色

• 4 CLI 后端：Claude Code（带会话恢复功能）、Gemini CLI、Codex CLI、Copilot CLI
• MCP 工具：18 个 Caido 工具通过 stdio 向每个提供者开放
• Caido 集成：命令面板，请求/响应的上下文菜单（“Review Request”、“Build Test Plan”、“Review Response”、“Inspect JavaScript”）
• 结构化HTTP切换：分析操作保持可见提示词简短，并将原始请求/响应材料作为单独的聊天附件附加
• 上下文可视化：头部显示当前的 Caido UI 上下文及任何显式 MCP 项目覆盖
• 工具安全：每组支持并可选确认敏感MCP操作（send_request、create_finding、set_environment、截获控制、run_workflow）

Drift - Security copilot / MCP assistant for Caido

Drift runs locally-installed AI CLI tools (Claude Code, Gemini CLI, Codex CLI, Copilot CLI) inside Caido with live access to your Caido session via an embedded MCP server.

No API keys needed — Drift uses CLI tools already authenticated on your machine. Every chat turn runs against a local CLI; traffic never leaves your box for a remote LLM-hosting service.

Features

• 4 CLI backends: Claude Code (with session resume), Gemini CLI, Codex CLI, Copilot CLI
• MCP tools: 18 Caido tools exposed to every provider via stdio
• Caido integration: command palette, context menus on requests/responses (“Review Request”, “Build Test Plan”, “Review Response”, “Inspect JavaScript”)
• Structured HTTP handoff: analysis actions keep the visible prompt short and attach raw request/response material as a separate chat attachment
• Context visibility: the header shows the current Caido UI context plus any explicit MCP project override
• Tool safety: per-group enables plus optional confirmation for sensitive MCP actions (send_request, create_finding, set_environment, intercept controls, run_workflow)
• MCP activity trace: assistant replies show which Caido tools were called and how they ended
• Live MCP test: Settings can verify tool discovery plus live get_environment and search_history calls before you trust a provider session
• Chat persistence: conversations saved via SQLite with JSON backup; persistence failures surfaced rather than silently swallowed
• Streaming output with real cancellation, a spawn-time timeout watchdog, and per-chat session lifecycle status
• Cancel-safe turns: pressing Stop never duplicates the assistant message even if the provider resolves after SIGTERM
• Context-menu queue: a context-menu action fired while another turn is streaming is queued with a toast, drained when the current turn finishes, and cleared if you press Stop
• In-app Help tab: prerequisites, setup walkthrough, troubleshooting, prompt examples
• Diagnostics report: one-click copy/download of a redacted diagnostics bundle for bug reports
• Session debug log (opt-in): a checkbox in Settings > Process streams per-session provider lifecycle events to /tmp/drift-session-.log and deletes the file when the session ends

Installation

pnpm install
pnpm build

Install dist/drift.zip in Caido via Plugins > Install from file.

Configuration

CLI Providers