Asterisk MCP Server

🚀 Asterisk MCP Server

A Model Context Protocol (MCP) server that provides code security scanning capabilities, used to analyze code snippets, code repositories, and verify code changes.

🚀 Quick Start

The Asterisk MCP Server is a middleware component that connects to the Asterisk Security API to enable real-time code security analysis. It implements the Model Context Protocol (MCP) and provides security scanning tools for AI assistants such as Claude, Cursor, Cline, and Windsurf, allowing them to analyze security vulnerabilities in code.

✨ Features

• Code Snippet Scanning: Analyze security vulnerabilities in a single code snippet.
• Code Repository Scanning: Scan multiple files to detect security issues with comprehensive context coverage.
• Change Verification: Check whether code changes in the chat history introduce security vulnerabilities.
• User-Friendly Settings Interface: Configure the server through a graphical interface.
• Flexible Transport Protocols: Support stdio and SSE transport protocols.
• Detailed Logging: Provide detailed logs with adjustable verbosity.

📦 Installation

Requirements

• Python 3.10+
• pipx / uvx
• httpx
• mcp[cli]
• dearpygui (for the settings interface)

💻 Usage Examples

Basic Usage

{
  "mcpServers": {
    "asterisk-mcp": {
      "command": "pipx",
      "args": [
        "run",
        "asterisk-mcp",
        "--host",
        "0.0.0.0",
        "--port",
        "8000"
      ],
      "stdOut": "/tmp/mcp/stdout.log",
      "stdErr": "/tmp/mcp/stderr.log",
      "logLevel": "INFO"
    }
  }
}

📚 Documentation

Configuration

API Server Settings

• --host: Specify the binding address, default is 0.0.0.0.
• --port: Specify the listening port, default is 8000.

MCP Server Settings

• logLevel: Adjust the log level. Available values are DEBUG, INFO, WARNING, ERROR, CRITICAL. The default is INFO.
• stdOut and stdErr: Specify the file paths for standard output and error output respectively.

Available Tools

• Code Snippet Scanning: Analyze security issues in single or multi-line code.
• Code Repository Scanning: Traverse the entire project directory to detect potential security vulnerabilities.
• Change Verification: Compare old and new versions of the code, identify new or modified parts, and evaluate their impact on security.

Architecture

flowchart LR
    IDE["IDE / Code Editor"] <--> |MCP Protocol| MCP["Asterisk MCP Server"]
    MCP <--> |HTTP/HTTPS| API["Asterisk Vulnerability Scanner API"]
    
    classDef primary fill:#6696FF,stroke:#333,stroke-width:1px,color:white;
    classDef secondary fill:#45556B,stroke:#333,stroke-width:1px,color:white;
    classDef tertiary fill:#FFCC00,stroke:#333,stroke-width:1px,color:black;
    
    class IDE primary;
    class MCP secondary;
    class API tertiary;

Data Flow

1. The user submits code snippets or files through the interface.
2. The MCP server receives the request and parses the content.
3. The request is forwarded to the Asterisk Security API for in-depth analysis.
4. The analysis results are returned to the MCP server.
5. The MCP server formats the results and presents them to the user.

Troubleshooting

Connection Issues

• Check the network connection and ensure that the target server is reachable.
• Confirm that the port configuration is correct and not blocked by the firewall.

Authentication Errors

• Verify the access permissions and credentials of the API interface.
• Ensure that the authentication information in the request header is complete and correct.

Timeout Issues

• Increase the timeout setting and adjust the waiting time for API requests.
• Optimize the code scanning strategy to reduce unnecessary analysis steps.

📄 License

This project is licensed under the MIT License. Please refer to the LICENSE file for specific terms.

💡 Usage Tip

For technical support or to report issues, please visit the Asterisk official website or join the community discussion group.