mcpsec 1.1.0

MCP Security Benchmark Framework — vendor-neutral security evaluation for MCP gateways
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

// Copyright 2026 Paolo Vella
// SPDX-License-Identifier: Apache-2.0
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0

use clap::Parser;
use mcpsec::{run_benchmark, BenchmarkConfig, GatewayConfig, OutputFormat};

#[derive(Parser)]
#[command(name = "mcpsec", about = "MCP Security Benchmark Framework")]
struct Cli {
    /// Base URL of the gateway under test
    #[arg(long)]
    target: String,

    /// Path to the evaluate endpoint
    #[arg(long, default_value = "/api/evaluate")]
    evaluate_path: String,

    /// Bearer token for authentication
    #[arg(long)]
    auth: Option<String>,

    /// Output file path (stdout if not specified)
    #[arg(long, short)]
    output: Option<String>,

    /// Output format: json or markdown
    #[arg(long, default_value = "json")]
    format: String,

    /// Per-request timeout in seconds
    #[arg(long, default_value = "30")]
    timeout: u64,
}

#[tokio::main]
async fn main() {
    let cli = Cli::parse();

    let format = match cli.format.as_str() {
        "markdown" | "md" => OutputFormat::Markdown,
        _ => OutputFormat::Json,
    };

    let config = BenchmarkConfig {
        gateway: GatewayConfig {
            base_url: cli.target,
            evaluate_path: cli.evaluate_path,
            auth_header: cli.auth,
        },
        format,
        timeout_secs: cli.timeout,
        concurrency: 1,
    };

    let result = run_benchmark(&config).await;

    let output = match format {
        OutputFormat::Json => mcpsec::report::to_json(&result),
        OutputFormat::Markdown => mcpsec::report::to_markdown(&result),
    };

    if let Some(path) = cli.output {
        if let Err(e) = std::fs::write(&path, &output) {
            eprintln!("Failed to write output file '{path}': {e}");
            std::process::exit(1);
        }
        eprintln!("Results written to {path}");
    } else {
        println!("{output}");
    }
}