広告掲載
MCP.so
ログイン
L

Laraguard MCP Server

@ecr17dev

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

ecr17dev

投稿者

ecr17.dev

Laraguard MCP Server について

概要はまだありません

Laraguard MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "laraguard": {
      "command": "node",
      "args": [
        "/absolute/path/to/Laraguard MCP/dist/index.js"
      ],
      "env": {
        "MCP_BASE_PATHS": "/absolute/path/to/your-laravel-project"
      }
    }
  }
}

Laraguard MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Laraguard MCP?

Laraguard MCP is a security audit server for Laravel projects that implements the Model Context Protocol (MCP) using stdio transport. It performs static analysis, dependency CVE scanning, and live attack simulation without requiring Laravel to be running, returning structured JSON findings categorized by severity.

How to use Laraguard MCP?

Clone the repository, install dependencies with npm install, and optionally configure environment variables (e.g., MCP_BASE_PATHS). Then add a laraguard entry to your MCP client’s configuration (JSON block with command node pointing to dist/index.js, or npx tsx pointing to src/index.ts under development). Tools are invoked by sending tool calls like project_info, full_audit, or attack_simulate with a path and optional baseUrl.

Key features of Laraguard MCP

  • Static code scanning with 15+ rules covering SQL injection, RCE, hardcoded credentials, and LFI
  • Blade XSS scanner that detects unescaped output in templates
  • Route and middleware audit for missing auth, throttle, or CSRF exceptions
  • Dependency CVE feed querying the OSV.dev batch API for real vulnerabilities
  • Configuration audit inspecting .env and config/cors.php for critical misconfigurations
  • Active attack simulation firing live HTTP probes (SQLi, XSS, CSRF, auth bypass, rate limiting)

Use cases of Laraguard MCP

  • Pre-deployment security audit of Laravel codebases to catch vulnerabilities before production
  • Continuous integration pipeline integration to block risky commits automatically
  • Dependency vulnerability monitoring via composer.lock CVE lookups
  • Security researcher or penetration tester tool for automated Laravel reconnaissance

よくある質問

1

What runtime does Laraguard MCP require?

Node.js 20 or higher and npm 10 or higher are required. The server runs as a pure TypeScript process using `@modelcontextprotocol/sdk`.

2

Does Laraguard MCP send my project data to an external service?

Only the `dependency_audit` tool makes external HTTP requests to the OSV.dev API to query CVEs. All other tools operate entirely locally, and sensitive values are redacted before reaching the MCP client.

3

How do I configure which directories can be scanned?

Set the `MCP_BASE_PATHS` environment variable (comma-separated) or `MCP_BASE_PATH` (single path) in the MCP client’s `env` block. If neither is set, the current working directory is used.

4

Which MCP clients are supported?

Any MCP client that supports stdio transport, including Cursor, Claude Desktop, and VS Code MCP extensions. Configuration involves adding a `laraguard` entry under `mcpServers` in the client’s config file.

5

How does attack simulation work and what does it require?

The `attack_simulate` tool sends six live HTTP probes (SQL injection, XSS, CSRF, auth bypass, rate limiting, error disclosure) to a running Laravel app. It requires the `baseUrl` parameter pointing to a live server.

コメント

「その他」の他のコンテンツ

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

MaxKB

1Panel-dev

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

22.0K
N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

広告掲載