Integrations
Provides tools for interacting with Google's On-Demand Scanning API, enabling vulnerability scanning capabilities for container images and packages in Google Cloud environments.
MCP Server
This project is an MCP (Multi-Agent Conversation Protocol) Server for the given OpenAPI URL - https://api.apis.guru/v2/specs/googleapis.com/ondemandscanning/v1beta1/openapi.json, auto-generated using AG2's MCP builder.
Prerequisites
- Python 3.9+
- pip and uv
Installation
- Clone the repository:Copy
- Install dependencies:
The .devcontainer/setup.sh script handles installing dependencies using
pip install -e ".[dev]"
. If you are not using the dev container, you can run this command manually.Alternatively, you can useCopyuv
:Copy
Development
This project uses ruff
for linting and formatting, mypy
for static type checking, and pytest
for testing.
Linting and Formatting
To check for linting issues:
To format the code:
These commands are also available via the scripts/lint.sh script.
Static Analysis
To run static analysis (mypy, bandit, semgrep):
This script is also configured as a pre-commit hook in .pre-commit-config.yaml.
Running Tests
To run tests with coverage:
This will run pytest and generate a coverage report. For a combined report and cleanup, you can use:
Pre-commit Hooks
This project uses pre-commit hooks defined in .pre-commit-config.yaml. To install the hooks:
The hooks will run automatically before each commit.
Running the Server
The MCP server can be started using the mcp_server/main.py script. It supports different transport modes (e.g., stdio
, sse
).
To start the server (e.g., in stdio mode):
The server can be configured using environment variables:
CONFIG_PATH
: Path to a JSON configuration file (e.g., mcp_server/mcp_config.json).CONFIG
: A JSON string containing the configuration.SECURITY
: Environment variables for security parameters (e.g., API keys).
Refer to the if __name__ == "__main__":
block in mcp_server/main.py for details on how these are loaded.
The tests/test_mcp_server.py file demonstrates how to start and interact with the server programmatically for testing.
Building and Publishing
This project uses Hatch for building and publishing. To build the project:
To publish the project:
These commands are also available via the scripts/publish.sh script.
This server cannot be installed
An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.
Related MCP Servers
- -securityAlicense-qualityAn MCP server for interacting with Google's Chronicle Security Operations suite, enabling users to search security events, get alerts, look up entities, list security rules, and retrieve IoC matches.Last updated -5PythonApache 2.0
- -security-license-qualityAn MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.Last updated -1Python
- -securityFlicense-qualityAn MCP server that enables interaction with Google Cloud Game Services API, allowing users to manage game server deployments, realms, and configurations through natural language.Last updated -Python
- -securityFlicense-qualityAn MCP server that provides access to Google's API Discovery Service, allowing agents to discover and interact with Google APIs through natural language commands.Last updated -Python