Spacefast Security (spacefast-sec)

spacefast-sec is a standalone, keyless Cloudflare Worker Streamable HTTP MCP Server and Multi-Agent Security Plugin (skills/spacefast-security/SKILL.md) built to work alongside Automattic's official Spacefast MCP (https://mcp.spacefast.com) in a single chat session.

Companion to Security Monitor (secmon): spacefast-sec brings the deterministic vulnerability matching, cve.now + OSV + CISA KEV + FIRST EPSS prioritization, repository-to-production drift detection, and strict fail-closed (needs_validation) rules from umitaltinozzz/security-monitor directly to Spacefast (*.space.fast and drop.fast) deployments.

Install as a Plugin (All AI Tools & Web UI)

Just like spacefast/plugins, this repository includes native plugin manifests (.claude-plugin, .codex-plugin, .cursor-plugin, .antigravity-plugin, .plugin, .grok-plugin, .kimi-plugin, .factory-plugin, GEMINI.md, and .mcp.json) so you can install both the Spacefast MCP + spacefast-sec MCP and the 6-Phase Security Skill with a single command:

Claude Code

claude plugin marketplace add umitaltinozzz/spacefast-sec
claude plugin install spacefast-sec@spacefast-sec

OpenAI Codex

codex plugin marketplace add umitaltinozzz/spacefast-sec
codex plugin add spacefast-sec@spacefast-sec

Cursor

npx -y plugins add umitaltinozzz/spacefast-sec -t cursor -y

GitHub Copilot CLI

copilot plugin install umitaltinozzz/spacefast-sec

Antigravity (agy)

agy plugin install https://github.com/umitaltinozzz/spacefast-sec

Goose

DISABLE_TELEMETRY=1 npx -y skills@1.5.23 add https://github.com/umitaltinozzz/spacefast-sec/tree/main/skills --agent goose --skill '*' --yes

Claude.ai Web & ChatGPT Web (chatgpt.com)

In Claude.ai (Settings → Integrations → Add Remote MCP) or ChatGPT (Settings → Connectors → Add MCP Server), add:

• Spacefast MCP: https://mcp.spacefast.com

• Spacefast Security MCP: https://mcp-production-815872d6.up.railway.app/mcp (primary, Railway)

• Alternate endpoint: https://spacefast-sec-mcp.umiqi.workers.dev/mcp (Cloudflare Workers edge; on the free Workers plan very large scans may report dataGaps because of the 50-subrequest limit)

Both endpoints run the same handler and pre-authorize the https://claude.ai and https://chatgpt.com origins.

Related MCP server: agent-sec-mcp

Why spacefast-sec exists

When projects are deployed to Spacefast (*.space.fast) or dragged-and-dropped via drop.fast:

1. Static asset exposure: Dropping a raw project folder without a build filter can expose /.env, /.git/HEAD, /package.json, /package-lock.json, or production source maps (/*.js.map) directly on the public https://<name>.space.fast URL.

2. Client-bundle secret & fail-open leaks: Rapidly built apps frequently leak private API keys through VITE_* / NEXT_PUBLIC_* / REACT_APP_* environment prefixes or fall back to hardcoded secrets (process.env.JWT_SECRET || "default").

3. Unpinned ranges & local-to-Space drift: A vulnerability fixed in your local workspace may never have been published to the live Space, or the Space may only have a package.json without a lockfile.

With spacefast MCP + spacefast-sec MCP configured together, your coding agent reads the Space's files, runs a deterministic 6-phase audit, shows you a unified package.json diff, and—only after your explicit approval—patches and republishes the Space in the same chat.

How it works in a single chat

flowchart LR
  subgraph Agent["Your Coding Agent (Claude Code, Codex, Cursor, OpenCode, Web UI)"]
    Skill["6-Phase Skill (skills/spacefast-security/SKILL.md)"]
  end

  subgraph Spacefast["Official Spacefast MCP (https://mcp.spacefast.com)"]
    SFRead["List Spaces & read manifests / source files"]
    SFWrite["Write approved package.json diff & republish"]
  end

  subgraph SecMonWorker["spacefast-sec MCP (Railway / Cloudflare Workers)"]
    Inv["Multi-ecosystem lockfile & manifest parser"]
    Adv["OSV + cve.now + CISA KEV + FIRST EPSS"]
    Prio["0-100 Priority + Reachability + fp-check"]
    SAST["Secrets (redacted) + Bundle leaks + OWASP SAST"]
    Probe["Live https://<name>.space.fast HTTP probe"]
    Diff["Drift & unified diff planner"]
  end

  Skill -->|"1. Fetch Space files"| SFRead
  Skill -->|"2. scan_space_full"| SecMonWorker
  Inv --> Adv --> Prio --> Diff
  SAST --> Diff
  Probe --> Diff
  Skill -->|"3. Present report & diff for user approval"| User(("User Approval"))
  User -->|"4. Approved"| SFWrite

Synthesized Security Frameworks

spacefast-sec combines 4 official open-source security skill frameworks with the Security Monitor (secmon) engine:

MCP Tools Exposed (POST /mcp)

Fail-Closed Guarantees

Following Security Monitor's core rule, missing or unverified data is never marked safe:

overallState is clean only when every one of these holds; otherwise it returns needs_validation with explicit validationReasons:

• Every ecosystem with a manifest has a parsed lockfile (missingLockfileFor is empty), no lockfile failed to parse (unparsedLockfiles is empty), and no unsupported manifest (pyproject.toml, composer.lock, bun.lock, etc.) was supplied without a supported lockfile.

• No unpinned or unresolvable dependency specifier remains.

• OSV and CISA KEV answered completely (complete: true).

• If a spaceUrl was probed, the Space was reachable and every sensitive-path check was conclusive (HTTP 429, 5xx, or timeouts are recorded in unverifiedPaths and trigger needs_validation).

Self-Hosting / Development

# 1. Install dependencies
pnpm install

# 2. Run strict TypeScript check & test suite (60 tests)
pnpm typecheck
pnpm test

# 3. Run locally with Wrangler (http://localhost:8787/mcp)
pnpm dev

# 4. Deploy to Cloudflare Workers
pnpm deploy

# 5. Or run as a plain Node server (Railway, Fly, any container host)
pnpm build:node && PORT=3000 pnpm start   # or: docker build -t spacefast-sec . && docker run -p 3000:3000 spacefast-sec

The Node entry (src/node.ts) reuses the exact Worker handler. It reads the same variables from the environment, rate limits with an in-memory window (RATE_LIMIT_PER_MINUTE, default 30) keyed on the rightmost X-Forwarded-For value, and has no subrequest/CPU limits.

Configuration (wrangler.toml, zero API keys)

All upstream vulnerability feeds are public and keyless:

Related Projects

• Security Monitor (secmon) — The main local-first desktop app, CLI, read-only Linux SSH agent, and Rust vulnerability engine that powers the secmon ecosystem.

• cve.now — Curated CVE feed and summaries used by Security Monitor and spacefast-sec (CC BY 4.0).

• Spacefast Plugins & MCP — Official Spacefast MCP server and plugins for creating, editing, and publishing Spaces.

License

MIT, see LICENSE. See Security Monitor (umitaltinozzz/security-monitor) for full data source attributions.