Skip to content

Releases: AthenaCyberDefense/ckl-mcp

Release list

ckl-mcp v0.2.0

ckl-mcp v0.2.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Sep 02:51
v0.2.0
7132f5d

What's new

Optional HTTP server (CklMcp.Http)

Serves the same 15 tools over Streamable HTTP, so hosted model APIs (OpenAI Responses API, Anthropic
Messages API) and other remote clients can reach them. It is a separate executable: the stdio
server has no network code and still needs only the base .NET runtime.

  • Loopback only by default, with a bearer token required on every request and browser Origin checks.
  • Refuses to listen beyond loopback unless you pass --allow-remote, supply your own token, and set
    --root. Typos in its options are errors, not silently ignored.
  • Stateless with one shared workspace: load a checklist in one call and edit it in a later one, even
    from a different connection. (The newest MCP protocol revision has no HTTP sessions.)
  • No built-in TLS. To reach a hosted API, put it behind a TLS-terminating tunnel or proxy.
  • Tested with Claude Code over HTTP and the MCP C# SDK client, and the Windows and Linux release builds
    were checked for authentication, origin and refusal-to-bind behavior. Not yet run against the live
    OpenAI or Anthropic hosted services    ; please report what you find.

See HTTP mode in the README for setup and the
hosted-API snippets.

Stricter stdio server

The stdio server now rejects unknown command-line options: it exits with code 2 and an error message
before serving anything. Previously a typo such as --readonly was silently ignored, leaving the server
read-write with no hint that the restriction hadn't applied. --help is new, and a missing or invalid
--root now gives a clean error instead of a stack trace.

Upgrade notes

  • If your MCP client config passes any argument other than --read-only or --root <dir> to the stdio
    server, it will now refuse to start.     Remove the extra argument. Most configurations pass none.
  • Nothing else changes for stdio users: same 15 tools, same options, same behavior.

Downloads

You want Download
The stdio server (most people) CklMcp-0.2.0-<platform>
The HTTP server CklMcp-Http-0.2.0-<platform>

Platforms: Windows x64 (.zip, framework-dependent or self-contained), Linux x64 and macOS Apple
silicon (.tar.gz, self-contained).

  • Windows framework-dependent builds need the .NET 8 runtime;
    the HTTP one needs the ASP.NET Core 8 runtime. Self-contained builds need nothing.
  • Linux and macOS: run chmod +x on the executable if needed.
  • macOS builds are not code-signed; if Gatekeeper blocks one, run xattr -d com.apple.quarantine <file>.
    The macOS builds are untested by the maintainer.

Unclassified data only.

Full Changelog: v0.1.0...v0.2.0

Assets 10
Loading

ckl-mcp v0.1.0

ckl-mcp v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Sep 02:01
v0.1.0
5b0283b

MCP stdio server for DISA STIG checklists. Point your MCP client (Claude, Codex, Gemini CLI, VS Code Copilot, Cursor) at the executable; the README has a config snippet for each. Windows: the framework-dependent zip needs the .NET 8 Runtime; the self-contained zip needs nothing. Linux and macOS: self-contained tarballs; run chmod +x CklMcp.Server if needed. macOS builds are not code-signed, so if Gatekeeper blocks the file run xattr -d com.apple.quarantine CklMcp.Server. The macOS build is untested by the maintainer. Unclassified data only.

Full Changelog: https://github.com/Priyendu/ckl-mcp/commits/v0.1.0

Loading