mcp-scanner/pyproject.toml at main · CiscoSE/mcp-scanner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
[build-system]
requires = ["setuptools>=61.0"]
build-backend = "setuptools.build_meta"

[project]
name = "cisco-ai-mcp-scanner"
version = "3.2.0"
description = "A tool to scan MCP servers and tools for security findings"
authors = [
    {name = "Cisco"},
]
readme = "README.md"
requires-python = ">=3.11,<3.14"
classifiers = [
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Operating System :: OS Independent",
    "Intended Audience :: Developers"
]
dependencies = [
    "mcp[cli]>=1.13.1",
    "httpx>=0.28.1",
    "yara-python>=4.5.4",
    "fastapi>=0.110.0",
    "uvicorn>=0.29.0",
    "pydantic>=2.6.0",
    "python-dotenv>=1.0.0",
    "litellm<1.77.0",
]

[dependency-groups]
dev = [
    "pytest>=8.4.1",
    "pytest-asyncio>=1.0.0",
    "pytest-cov>=6.2.1",
    "respx>=0.22.0",
    "black>=24.0.0",
    "flake8>=7.0.0",
    "isort>=5.13.0",
    "mypy>=1.8.0",
    "pre-commit>=3.6.0",
]

[project.scripts]
mcp-scanner = "mcpscanner.cli:cli_entry_point"
mcp-scanner-api = "mcpscanner.server:main"

[tool.pytest.ini_options]
pythonpath = ["."]
testpaths = ["tests"]
addopts = "--maxfail=1"
filterwarnings = [
    # Silence Pydantic deprecation/future warnings across all tests
    #"ignore::DeprecationWarning:pydantic.*",
    #"ignore::FutureWarning:pydantic.*",
    # Silence noisy Pydantic serializer warnings emitted by OpenAI/LiteLLM models
    "ignore:Pydantic serializer warnings:UserWarning:pydantic.*",
    # Fallback by message for environments where the category path differs
    #"ignore:Pydantic V1 style.*:DeprecationWarning",
    #"ignore:.*Pydantic.*deprecated.*:DeprecationWarning",
]
markers = [
    "integration: mark for tests that hit external services (run with -m integration)",
]

[tool.setuptools.packages.find]
include = ["mcpscanner*", "examples*", "data*"]

[tool.setuptools.package-data]
"mcpscanner" = ["data/prompts/*.md", "data/yara_rules/*.yara", "data/yara_rules/*.yar"]

# Code formatting and linting configuration
[tool.black]
line-length = 88
target-version = ['py311', 'py312', 'py313']
include = '\.pyi?$'
extend-exclude = '''
# A regex preceded by ^/ will apply only to files and directories
# in the root of the project.
^/setup.py
'''

[tool.isort]
profile = "black"
line_length = 88
multi_line_output = 3
include_trailing_comma = true
force_grid_wrap = 0
use_parentheses = true
ensure_newline_before_comments = true

[tool.flake8]
max-line-length = 88
extend-ignore = ["E203", "W503", "E501"]
exclude = [".git", "__pycache__", "build", "dist", ".venv", "venv"]

[tool.mypy]
python_version = "3.13"
warn_return_any = true
warn_unused_configs = true
disallow_untyped_defs = false
disallow_incomplete_defs = false
check_untyped_defs = true
disallow_untyped_decorators = false
no_implicit_optional = true
warn_redundant_casts = true
warn_unused_ignores = true
warn_no_return = true
warn_unreachable = true
strict_equality = true

[[tool.mypy.overrides]]
module = [
    "yara",
    "litellm",
    "mcp.*",
]
ignore_missing_imports = true