MCP Security Server

This is a Model Context Protocol (MCP) server that provides file operations, npm package management, and configuration checking capabilities.

Available Tools

File Operations

1. count_lines_in_file - Count lines in a text file and return metadata
2. write_to_file - Write content to a file with append/overwrite modes
3. read_file_content - Read file content with encoding options

NPM Package Management

4. check_outdated_packages - Check for outdated npm packages
5. analyze_package_security - Run npm security audit
6. check_npm_version - Check npm installation and version

Configuration Management

7. check_npmrc_config - Check local and global .npmrc files
8. check_npm_global_config - Check global npm configuration
9. verify_registry_config - Verify npm registry configuration
10. check_npm_cache - Check npm cache information

Installation

1. Clone or create the project
2. Install dependencies: npm install
3. Build the project: npm run build
4. Run the server: npm start or npm run dev

Usage

The server communicates via the Model Context Protocol (MCP) over stdio. It can be integrated with MCP-compatible clients.

Example Tool Usage

Count lines in a file

{
  "name": "count_lines_in_file",
  "arguments": {
    "file_path": "/path/to/file.txt"
  }
}

Check outdated packages

{
  "name": "check_outdated_packages",
  "arguments": {
    "include_dev": true
  }
}

Write to file

{
  "name": "write_to_file",
  "arguments": {
    "file_path": "/path/to/output.txt",
    "content": "Hello, World!",
    "mode": "overwrite"
  }
}

Security Features

• Path traversal protection
• File size limits
• Input validation
• Error handling
• Safe npm command execution

Development

• npm run dev - Run in development mode with tsx
• npm run build - Build TypeScript to JavaScript
• npm start - Run the built server

License

ISC