Skip to content

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Jul 15:43
· 43 commits to main since this release
v0.1.0
898f3cf

Release Notes: v0.1.0

Summary

v0.1.0 is the initial release of crowdsec-ops-mcp, a CrowdSec-focused local MCP server for operator investigations and tightly scoped IP actions.

Added

  • Initial MCP server package and stdio entry point.
  • CrowdSec read tools: inspect_ip, security_summary, top_offenders, recent_crowdsec_decisions, and recent_crowdsec_alerts.
  • Scenario proposal helper: suggest_scenario(window?) for repeated CrowdSec alert patterns.
  • Single-IP operator action tools: ban_ip, allow_ip, and unban_ip, dry-run by default with explicit execute support in this release.
  • CrowdSec LAPI decision reads and cscli alert/action integration.
  • Dockerfile and Docker Compose example for local deployment.
  • Initial CI, PR metadata validation, Dependabot configuration, and release automation.
  • Onboarding, release, PR rule, and release-note template documentation.

Security And Safety

  • The MCP boundary is CrowdSec-only; no metrics, logs, dashboard, reverse-proxy, Snort, or Docker socket integrations are included.
  • Write actions are scoped to individual IP addresses.
  • Read-only CrowdSec tools are the recommended default workflow.

Upgrade Notes

  • Use ghcr.io/frli4797/crowdsec-ops-mcp:0.1.0 for the initial container image.
  • Configure CrowdSec access with CROWDSEC_LAPI_URL, CROWDSEC_LAPI_KEY, CSCLI_PATH, and DEFAULT_WINDOW as needed.

Validation

  • Initial unit test suite for analysis and client behavior.
  • CI package/test workflow.
Assets 2
Loading