rs and display the scan results in the MCP marketplace, collectively building a safer MCP ecosystem. If you are interested in cooperating with us, please contact Tencent Zhuque Lab at zhuque [at] tencent.com. We also welcome you to share your implementation cases within the MCP community. ## 📋 Feature Description AI Infra Guard consists of three core modules: 1. **AI Component Vulnerability Scanning (`scan`)**: Detects known security vulnerabilities in web-based components within AI infrastructure via the command line. 2. **MCP Security Analysis (`mcp`)**: Analyzes security risks in MCP Server code based on AI Agent via the command line. 3. **WebUI Mode (`webserver`)**: Enables the web-based visual operation interface. ## 📦 Installation and Usage ### Installation Download the latest version suitable for your operating system from the [Releases](https://github.com/Tencent/AI-Infra-Guard/releases) page. ### Command Line Structure AI Infra Guard uses a subcommand structure: ```bash ./ai-infra-guard [options] ``` Main subcommands: * `scan`: Executes AI component security vulnerability scanning. * `mcp`: Executes MCP Server code security analysis. * `webserver`: Starts the Web interface server. ### Usage #### WebUI Visual Operation Start the web server, listening on `127.0.0.1:8088` by default: ```bash ./ai-infra-guard webserver ``` Specify the listening address and port: ```bash ./ai-infra-guard webserver --ws-addr : ``` *Example: `./ai-infra-guard webserver --ws-addr 0.0.0.0:9090`* #### AI Component Vulnerability Scanning (`scan`) **Local One-Click Detection** (Scans common local service ports): ```bash ./ai-infra-guard scan --localscan ``` **Scan a Single Target**: ```bash ./ai-infra-guard scan --target ``` *Example: `./ai-infra-guard scan --target example.com`* **Scan Multiple Targets**: ```bash ./ai-infra-guard scan --target --target ``` *Example: `./ai-infra-guard scan --target 192.168.1.1 --target example.org`* **Read Targets from a File**: ```bash ./ai-infra-guard scan --file target.txt ``` *The `target.txt` file should contain one target URL or IP address per line.* **View Full Parameters for the `scan` Subcommand**: ```bash ./ai-infra-guard scan --help ``` **`scan` Subcommand Parameter Description**: ``` Usage: ai-infra-guard scan [flags] Flags: --ai Enable AI analysis (requires LLM Token configuration) --check-vul Validate the effectiveness of vulnerability templates --deepseek-token string DeepSeek API token (for --ai feature) -f, --file string File path containing target URLs --fps string Fingerprint template file or directory (default: "data/fingerprints") --header stringArray Custom HTTP request headers (can be specified multiple times, format: "Key:Value") -h, --help Show help information --hunyuan-token string Hunyuan API token (for --ai feature) --lang string Response language (zh/en, default: "zh") --limit int Maximum requests per second (default: 200) --list-vul List all available vulnerability templates --localscan Perform local one-click scan -o, --output string Result output file path (supports .txt, .json, .csv formats) --proxy-url string HTTP/SOCKS5 proxy server URL -t, --target stringArray Target URL (can be specified multiple times) --timeout int HTTP request timeout in seconds (default: 5) --vul string Vulnerability database directory (default: "data/vuln") ``` #### MCP Server Security Risk Analysis (`mcp`) This feature automatically analyzes security issues in MCP Server code using an AI Agent. **Basic Usage** (Uses OpenAI API by default, requires Token): ```bash ./ai-infra-guard mcp --code --model --token [--base-url ] ``` *Example: `./ai-infra-guard mcp

🛡️ A.I.G（AI-Infra-Guard）

工具