# MCP Security Server

This is a Model Context Protocol (MCP) server that provides file operations, npm package management, and configuration checking capabilities.

## Available Tools

### File Operations
1. **count_lines_in_file** - Count lines in a text file and return metadata
2. **write_to_file** - Write content to a file with append/overwrite modes
3. **read_file_content** - Read file content with encoding options

### NPM Package Management
4. **check_outdated_packages** - Check for outdated npm packages
5. **analyze_package_security** - Run npm security audit
6. **check_npm_version** - Check npm installation and version

### Configuration Management
7. **check_npmrc_config** - Check local and global .npmrc files
8. **check_npm_global_config** - Check global npm configuration
9. **verify_registry_config** - Verify npm registry configuration
10. **check_npm_cache** - Check npm cache information

## Installation

1. Clone or create the project
2. Install dependencies: `npm install`
3. Build the project: `npm run build`
4. Run the server: `npm start` or `npm run dev`

## Usage

The server communicates via the Model Context Protocol (MCP) over stdio. It can be integrated with MCP-compatible clients.

## Example Tool Usage

### Count lines in a file
```json
{
  "name": "count_lines_in_file",
  "arguments": {
    "file_path": "/path/to/file.txt"
  }
}
```

### Check outdated packages
```json
{
  "name": "check_outdated_packages",
  "arguments": {
    "include_dev": true
  }
}
```

### Write to file
```json
{
  "name": "write_to_file",
  "arguments": {
    "file_path": "/path/to/output.txt",
    "content": "Hello, World!",
    "mode": "overwrite"
  }
}
```

## Security Features

- Path traversal protection
- File size limits
- Input validation
- Error handling
- Safe npm command execution

## Development

- `npm run dev` - Run in development mode with tsx
- `npm run build` - Build TypeScript to JavaScript
- `npm start` - Run the built server

## License

ISC