Search / io.github.mechubsec/rustsdcmcp
rustsdcmcp
L0· runs locallyJuniper Security Director Cloud MCP server: scoped, audited change control. Rust.
v0.3.1 · active · repository · website · descriptor JSON · versions
Search / io.github.mechubsec/rustsdcmcp
L0· runs locallyJuniper Security Director Cloud MCP server: scoped, audited change control. Rust.
v0.3.1 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"rustsdcmcp": {
"command": "docker",
"args": [
"--rm",
"-i",
"--user",
"65532:65532",
"-v",
"${config_file}:/etc/rustsdcmcp/sdc.json:ro",
"-v",
"${state_dir}:/var/lib/sdcmcp",
"-v",
"${runtime_dir}:/var/lib/rustsdcmcp",
"-e",
"${credential_env}",
"ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"--transport",
"stdio",
"--state-file",
"/var/lib/sdcmcp/changeset-state.json"
]
}
}
}claude mcp add rustsdcmcp -- docker --rm -i --user 65532:65532 -v "${config_file}:/etc/rustsdcmcp/sdc.json:ro" -v "${state_dir}:/var/lib/sdcmcp" -v "${runtime_dir}:/var/lib/rustsdcmcp" -e "${credential_env}" ghcr.io/mechubsec/rustsdcmcp:0.3.1 --transport stdio --state-file /var/lib/sdcmcp/changeset-state.json[mcp_servers.rustsdcmcp]
command = "docker"
args = ["--rm", "-i", "--user", "65532:65532", "-v", "${config_file}:/etc/rustsdcmcp/sdc.json:ro", "-v", "${state_dir}:/var/lib/sdcmcp", "-v", "${runtime_dir}:/var/lib/rustsdcmcp", "-e", "${credential_env}", "ghcr.io/mechubsec/rustsdcmcp:0.3.1", "--transport", "stdio", "--state-file", "/var/lib/sdcmcp/changeset-state.json"]
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"rustsdcmcp": {
"type": "local",
"command": [
"docker",
"--rm",
"-i",
"--user",
"65532:65532",
"-v",
"{env:config_file}:/etc/rustsdcmcp/sdc.json:ro",
"-v",
"{env:state_dir}:/var/lib/sdcmcp",
"-v",
"{env:runtime_dir}:/var/lib/rustsdcmcp",
"-e",
"{env:credential_env}",
"ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"--transport",
"stdio",
"--state-file",
"/var/lib/sdcmcp/changeset-state.json"
],
"enabled": true
}
}
}{
"mcpServers": {
"rustsdcmcp": {
"command": "docker",
"args": [
"--rm",
"-i",
"--user",
"65532:65532",
"-v",
"${config_file}:/etc/rustsdcmcp/sdc.json:ro",
"-v",
"${state_dir}:/var/lib/sdcmcp",
"-v",
"${runtime_dir}:/var/lib/rustsdcmcp",
"-e",
"${credential_env}",
"ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"--transport",
"stdio",
"--state-file",
"/var/lib/sdcmcp/changeset-state.json"
]
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=rustsdcmcp&config=eyJjb21tYW5kIjoiZG9ja2VyIiwiYXJncyI6WyItLXJtIiwiLWkiLCItLXVzZXIiLCI2NTUzMjo2NTUzMiIsIi12IiwiJHtjb25maWdfZmlsZX06L2V0Yy9ydXN0c2RjbWNwL3NkYy5qc29uOnJvIiwiLXYiLCIke3N0YXRlX2Rpcn06L3Zhci9saWIvc2RjbWNwIiwiLXYiLCIke3J1bnRpbWVfZGlyfTovdmFyL2xpYi9ydXN0c2RjbWNwIiwiLWUiLCIke2NyZWRlbnRpYWxfZW52fSIsImdoY3IuaW8vbWVjaHVic2VjL3J1c3RzZGNtY3A6MC4zLjEiLCItLXRyYW5zcG9ydCIsInN0ZGlvIiwiLS1zdGF0ZS1maWxlIiwiL3Zhci9saWIvc2RjbWNwL2NoYW5nZXNldC1zdGF0ZS5qc29uIl19"
}{
"servers": {
"rustsdcmcp": {
"type": "stdio",
"command": "docker",
"args": [
"--rm",
"-i",
"--user",
"65532:65532",
"-v",
"${config_file}:/etc/rustsdcmcp/sdc.json:ro",
"-v",
"${state_dir}:/var/lib/sdcmcp",
"-v",
"${runtime_dir}:/var/lib/rustsdcmcp",
"-e",
"${credential_env}",
"ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"--transport",
"stdio",
"--state-file",
"/var/lib/sdcmcp/changeset-state.json"
]
}
}
}{
"mcpServers": {
"rustsdcmcp": {
"command": "docker",
"args": [
"--rm",
"-i",
"--user",
"65532:65532",
"-v",
"${config_file}:/etc/rustsdcmcp/sdc.json:ro",
"-v",
"${state_dir}:/var/lib/sdcmcp",
"-v",
"${runtime_dir}:/var/lib/rustsdcmcp",
"-e",
"${credential_env}",
"ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"--transport",
"stdio",
"--state-file",
"/var/lib/sdcmcp/changeset-state.json"
]
}
}
}extensions:
"rustsdcmcp":
enabled: true
name: "rustsdcmcp"
type: stdio
cmd: "docker"
args:
- "--rm"
- "-i"
- "--user"
- "65532:65532"
- "-v"
- "${config_file}:/etc/rustsdcmcp/sdc.json:ro"
- "-v"
- "${state_dir}:/var/lib/sdcmcp"
- "-v"
- "${runtime_dir}:/var/lib/rustsdcmcp"
- "-e"
- "${credential_env}"
- "ghcr.io/mechubsec/rustsdcmcp:0.3.1"
- "--transport"
- "stdio"
- "--state-file"
- "/var/lib/sdcmcp/changeset-state.json"
timeout: 300
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-4d-ago -unpinned-packages(1)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
ghcr.io/mechubsec/rustsdcmcp:0.3.1 | oci | unpinned | docker |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.mechubsec/rustsdcmcp",
"title": "rustsdcmcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.3.1",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/mechubsec/rustsdcmcp:0.3.1",
"runtimeHint": "docker",
"registryType": "oci",
"packageArguments": [
{
"name": "--transport",
"type": "named",
"value": "stdio",
"isRequired": true
},
{
"name": "--state-file",
"type": "named",
"value": "/var/lib/sdcmcp/changeset-state.json",
"isRequired": true
}
],
"runtimeArguments": [
{
"type": "positional",
"value": "--rm",
"isRequired": true
},
{
"type": "positional",
"value": "-i",
"isRequired": true
},
{
"name": "--user",
"type": "named",
"value": "65532:65532",
"isRequired": true
},
{
"name": "-v",
"type": "named",
"value": "{config_file}:/etc/rustsdcmcp/sdc.json:ro",
"variables": {
"config_file": {
"format": "filepath",
"isRequired": true,
"description": "Absolute host path to sdc.json. Credential material stays in the environment variable named by that file, not in this manifest."
}
},
"isRequired": true
},
{
"name": "-v",
"type": "named",
"value": "{state_dir}:/var/lib/sdcmcp",
"variables": {
"state_dir": {
"format": "filepath",
"isRequired": true,
"description": "Absolute host directory for change-set state. Must be writable by UID 65532."
}
},
"isRequired": true
},
{
"name": "-v",
"type": "named",
"value": "{runtime_dir}:/var/lib/rustsdcmcp",
"variables": {
"runtime_dir": {
"format": "filepath",
"isRequired": true,
"description": "Absolute host directory for the audit HMAC key file (audit-hmac.key). Must be writable by UID 65532. The image creates the key on first start when the file is absent."
}
},
"isRequired": true
},
{
"name": "-e",
"type": "named",
"value": "{credential_env}",
"variables": {
"credential_env": {
"default": "SDC_API_TOKEN",
"isRequired": true,
"description": "Environment variable name referenced by sdc.json credential_env. Pass the name only, as in docker -e NAME, so the value is not written into this argument."
}
},
"isRequired": true
}
]
}
],
"repository": {
"url": "https://github.com/mechubsec/rustsdcmcp",
"source": "github"
},
"websiteUrl": "https://mechub.org/projects/rustsdcmcp/",
"description": "Juniper Security Director Cloud MCP server: scoped, audited change control. Rust."
}