fuzzforge_ai/backend/mcp-config.json

{
  "name": "FuzzForge Security Testing Platform",
  "description": "MCP server for FuzzForge security testing workflows via Docker Compose",
  "version": "0.6.0",
  "connection": {
    "type": "http",
    "host": "localhost",
    "port": 8010,
    "base_url": "http://localhost:8010",
    "mcp_endpoint": "/mcp"
  },
  "docker_compose": {
    "service": "fuzzforge-backend",
    "command": "docker compose up -d",
    "health_check": "http://localhost:8000/health"
  },
  "capabilities": {
    "tools": [
      {
        "name": "submit_security_scan_mcp",
        "description": "Submit a security scanning workflow for execution",
        "parameters": {
          "workflow_name": "string",
          "target_path": "string",
          "volume_mode": "string (ro|rw)",
          "parameters": "object"
        }
      },
      {
        "name": "get_comprehensive_scan_summary",
        "description": "Get a comprehensive summary of scan results with analysis",
        "parameters": {
          "run_id": "string"
        }
      }
    ],
    "fastapi_routes": [
      {
        "method": "GET",
        "path": "/",
        "description": "Get API status and loaded workflows count"
      },
      {
        "method": "GET",
        "path": "/workflows/",
        "description": "List all available security testing workflows"
      },
      {
        "method": "POST",
        "path": "/workflows/{workflow_name}/submit",
        "description": "Submit a security scanning workflow for execution"
      },
      {
        "method": "GET",
        "path": "/runs/{run_id}/status",
        "description": "Get the current status of a security scan run"
      },
      {
        "method": "GET",
        "path": "/runs/{run_id}/findings",
        "description": "Get security findings from a completed scan"
      },
      {
        "method": "GET",
        "path": "/fuzzing/{run_id}/stats",
        "description": "Get fuzzing statistics for a run"
      }
    ]
  },
  "examples": {
    "start_infrastructure_scan": {
      "description": "Run infrastructure security scan on a project",
      "steps": [
        "1. Start Docker Compose: docker compose up -d",
        "2. Submit scan via MCP tool: submit_security_scan_mcp",
        "3. Monitor status and get results"
      ],
      "workflow_name": "infrastructure_scan",
      "target_path": "/Users/tduhamel/Documents/FuzzingLabs/fuzzforge_alpha/test_projects/infrastructure_vulnerable",
      "parameters": {
        "checkov_config": {
          "severity": ["HIGH", "MEDIUM", "LOW"]
        },
        "hadolint_config": {
          "severity": ["error", "warning", "info", "style"]
        }
      }
    },
    "static_analysis_scan": {
      "description": "Run static analysis security scan",
      "workflow_name": "static_analysis_scan",
      "target_path": "/Users/tduhamel/Documents/FuzzingLabs/fuzzforge_alpha/test_projects/static_analysis_vulnerable",
      "parameters": {
        "bandit_config": {
          "severity": ["HIGH", "MEDIUM", "LOW"]
        },
        "opengrep_config": {
          "severity": ["HIGH", "MEDIUM", "LOW"]
        }
      }
    },
    "secret_detection_scan": {
      "description": "Run secret detection scan",
      "workflow_name": "secret_detection_scan",
      "target_path": "/Users/tduhamel/Documents/FuzzingLabs/fuzzforge_alpha/test_projects/secret_detection_vulnerable",
      "parameters": {
        "trufflehog_config": {
          "verified_only": false
        },
        "gitleaks_config": {
          "no_git": true
        }
      }
    }
  },
  "usage": {
    "via_mcp": "Connect MCP client to http://localhost:8010/mcp after starting Docker Compose",
    "via_api": "Use FastAPI endpoints directly at http://localhost:8000",
    "start_system": "docker compose up -d",
    "stop_system": "docker compose down"
  }
}