vibe-guard
Version:
██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain
40 lines • 1.5 kB
TypeScript
import { BaseRule, FileContent, SecurityIssue } from '../types';
export declare class McpServerSecurityRule extends BaseRule {
readonly name = "mcp-server-security";
readonly description = "Detects insecure Model Context Protocol (MCP) server configurations with context-aware analysis";
readonly severity: "high";
private readonly insecurePatterns;
private readonly mcpContextPatterns;
private readonly configurationPatterns;
private readonly safePatterns;
check(fileContent: FileContent): SecurityIssue[];
private analyzeContext;
private isSafeContext;
private detectLanguage;
private detectFramework;
private detectConfigurationType;
private hasMcpContext;
private isInComment;
private isInString;
private isInConfiguration;
private isInTestFile;
private isInDocumentation;
private validateAccessControl;
private validateDisabledSecurity;
private validateDisabledAuth;
private validateOpenCors;
private validateWeakCredentials;
private validateDisabledEncryption;
private validateInsecureBinding;
private validateExcessiveLogging;
private validateNoRateLimit;
private validatePathTraversal;
private validateLocalBinding;
private validateMcpServerEnabled;
private validateShortContextPath;
private determineSeverity;
private isDevelopmentContext;
private isTestFile;
private getRemediationMessage;
}
//# sourceMappingURL=mcp-server-security.d.ts.map