#!/usr/bin/env node
/**
* Security Knowledge MCP Server
*
* A documentation proxy that guides AI agents through security assessments.
* Provides methodology, tool documentation, and workflow prompts.
*
* NO execution tools - AI agents run CLI commands themselves.
*/
import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
import { registerStaticResources } from './resources/static.js';
import { registerDynamicResources } from './resources/dynamic.js';
import { registerWorkflowPrompts } from './prompts/workflows.js';
// Create MCP server
const server = new McpServer({
name: 'security-knowledge',
version: '2.0.0',
});
// Register static resources (bundled methodology & references)
registerStaticResources(server);
// Register dynamic resources (doc proxy with MCP/web fallback)
registerDynamicResources(server);
// Register workflow prompts (user-friendly guided workflows)
registerWorkflowPrompts(server);
// Start the server
async function main() {
const transport = new StdioServerTransport();
await server.connect(transport);
console.error('Security Knowledge MCP server running on stdio');
}
main().catch((error) => {
console.error('Failed to start Security Knowledge MCP server:', error);
process.exit(1);
});