Skip to content

Releases: yxpil/SECFORGE

Release list

SECFORGE v0.1.0

SECFORGE v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Sep 13:21
v0.1.0
4814f52

First release of SECFORGE — the security MCP server for AI agents.

Highlights

  • 29 MCP tools aggregating the 5 BITECO satellites: neton (11), firelin (5), adonword (3), howcueme (4), memorypool (6)
  • MCP over Streamable HTTP: JSON-RPC 2.0 on / and /mcp, Mcp-Session-Id sessions, protocol versions 2024-11-05 / 2025-03-26 / 2025-06-18 — verified against BIT's MCP client
  • Satellite auto-detection from PATH, or explicit --neton/--firelin/--adonword/--howcueme/--memorypool <path>; missing satellites hide their tools instead of erroring
  • Scan authorization gate: the 6 tools that touch other hosts (netscan / portscan / device / subdns / dirscan) stay hidden and refuse calls until the server is started with --yes-i-have-permission (or SECFORGE_I_HAVE_PERMISSION=yes); the satellites' own permission env vars are forwarded
  • Zero-runtime: single static Rust binary, one process per tool call, 30 s timeout, loopback bind by default
  • 12 integration/unit tests (CLI + full MCP flow with a compiled fake satellite), fmt/clippy clean

Install

cargo install --git https://github.com/yxpil/SECFORGE
# or download a binary below and put it on PATH
secforge serve                 # MCP endpoint on http://127.0.1:8756
secforge serve --yes-i-have-permission   # with scan tools unlocked

Add http://127.0.0.1:8756 as an MCP server in BIT — or any other Streamable-HTTP MCP client.

Highlights / 中文

  • 29 个 MCP 工具聚合 5 个 BITECO 卫星：neton (11)、firelin (5)、adonword (3)、howcueme (4)、memorypool (6)
  • Streamable HTTP 上的 MCP：/ 与 /mcp 的 JSON-RPC 2.0、Mcp-Session-Id 会话、兼容 2024-11-05 / 2025-03-26 / 2025-06-18 协议——已与 BIT 的 MCP 客户端对齐验证
  • 卫星自动探测（PATH）或显式路径指定；未安装的卫星自动隐藏工具
  • 扫描授权门控：触及其它主机的 6 个工具默认隐藏且拒绝调用，需以 --yes-i-have-permission（或 SECFORGE_I_HAVE_PERMISSION=yes）启动；同时向卫星转发其自身授权环境变量
  • 零运行时依赖：单一静态 Rust 二进制，每次调用独立进程，30 秒超时，默认仅绑定回环地址

Only scan networks you own or are authorized to test. / 只扫描你拥有或获授权的网络。

Assets 8
Loading