BLACKPROOF Local MCP 0.1.0 (alpha)

BLACKPROOF Local MCP 0.1.0 is an alpha, read-only local server for preparing cyber reviews, checking the integrity of selected Delivery exports and comparing aggregate changes between two exports. It is distributed as an MCPB package for Linux and macOS with Node.js >=22.23.2 <23. Production dependencies are included.

The default installation exposes public methodology and review checklists only. Private verification requires explicit file selection and an end-to-end local client and model. Results contain only checks and aggregate counts; no answers, evidence references, dossier identifiers or paths are returned. The server does not enforce the client's outbound network policy. See the local MCP usage and confidentiality requirements before configuring private mode. Human review and transmission remain explicit actions; integrity verification is not certification or factual validation.

Source revision: 88278ed6e80450630b71ec6205a46279cb8881a7. The application source is unchanged. The package adds installation metadata, bundled production dependencies and source provenance. build-mcpb.py reproduces the packaging from the clean source checkout and a pnpm production deployment; the accompanying source archive is available from this release.

Validation on macOS with Node.js 22.23.2 and pnpm 10.34.5: source syntax checks passed; 9 source MCP tests and the same 9 tests against the extracted release passed, including actual stdio exchanges with the official MCP client and test tripwires for network attempts. The official MCPB 0.3 schema and the MCP Registry declaration both passed validation. Two package builds produced identical SHA-256 hashes. Linux is declared by the source project but was not executed in this release check.

Registry name: io.github.l0gfr/blackproof.

Package SHA-256: 41c9ae29214d5b2af861d31eaa372a1ecbd148d37d25438eafc0503ae6c96e42.

License: AGPL-3.0-only; bundled dependencies retain their own licenses and notices.