mcpscc/pyproject.toml at main · gensecaihq/mcpscc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
[project]
name = "mscc"
version = "0.4.0"
description = "Security for the agent-context attack surface: map how MCP servers, skills, and memory chain into exposure paths."
readme = "README.md"
license = {text = "Apache-2.0"}
requires-python = ">=3.10"
authors = [
    {name = "MSCC Team"}
]
keywords = ["mcp", "security", "agent-security", "ai", "llm", "model-context-protocol", "skills", "memory-poisoning", "supply-chain"]
classifiers = [
    "Development Status :: 3 - Alpha",
    "Intended Audience :: Developers",
    "License :: OSI Approved :: Apache Software License",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Topic :: Security",
]

dependencies = [
    "httpx>=0.26.0",
    "pydantic>=2.5.0",
    "pydantic-settings>=2.1.0",
    "yara-python>=4.3.0",
    "rich>=13.7.0",
    "typer>=0.9.0",
    "pyyaml>=6.0",
]

[project.optional-dependencies]
api = [
    "fastapi>=0.109.0",
    "uvicorn[standard]>=0.27.0",
    "sqlalchemy[asyncio]>=2.0.0",
    "asyncpg>=0.29.0",
    "redis>=5.0.0",
    "celery>=5.3.0",
    "python-jose[cryptography]>=3.3.0",
    "passlib[bcrypt]>=1.7.4",
    "python-multipart>=0.0.6",
    "alembic>=1.13.0",
]
pdf = [
    "reportlab>=4.0.0",
]
# Local fleet dashboard: FastAPI + uvicorn only (SQLite store needs no extra
# deps). Much lighter than the full [api] stack.
dashboard = [
    "fastapi>=0.109.0",
    "uvicorn[standard]>=0.27.0",
]
dev = [
    "pytest>=7.4.0",
    "pytest-asyncio>=0.23.0",
    "pytest-cov>=4.1.0",
    "ruff>=0.1.0",
    "black>=23.12.0",
    "mypy>=1.8.0",
    "pre-commit>=3.6.0",
]

[project.urls]
Homepage = "https://github.com/gensecaihq/mcpscc"
Documentation = "https://github.com/gensecaihq/mcpscc#readme"
Repository = "https://github.com/gensecaihq/mcpscc"
Issues = "https://github.com/gensecaihq/mcpscc/issues"

[project.scripts]
mscc = "mscc.cli:app"

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.wheel]
packages = ["src/mscc"]
# Ship YARA rules and their index inside the wheel so detection works for
# pip/wheel installs, not just editable checkouts.
artifacts = [
    "src/mscc/rules/**/*.yar",
    "src/mscc/rules/**/*.yaml",
    "src/mscc/dashboard/ui/*.html",
]

[tool.hatch.build.targets.sdist]
include = [
    "src/mscc",
    "tests",
    "rules",
    "README.md",
    "LICENSE",
]

[tool.ruff]
line-length = 100
target-version = "py310"

[tool.ruff.lint]
select = ["E", "F", "I", "N", "W", "UP", "B", "C4", "SIM"]
ignore = ["E501"]

[tool.black]
line-length = 100
target-version = ["py310"]

[tool.mypy]
python_version = "3.10"
strict = true
ignore_missing_imports = true

[tool.pytest.ini_options]
asyncio_mode = "auto"
testpaths = ["tests"]