AI导哈

Gemara 制品管理 MCP 服务器

Gemara MCP 服务器用于管理 Gemara 制品，提供校验、迁移和引导式创建等能力，使开发者可通过 MCP 客户端完成安全制品生命周期管理。

  • by gemaraproj
  • Go
  • 本地部署
  • 8 星标
  • 更新于
在 GitHub 查看 gemaraproj/gemara-mcp

使用说明

gemara-mcp

Gemara MCP Server - A Model Context Protocol server for Gemara artifact management.

Building

Build the binary:

make build

Installation

MCP Client Configuration

To use this server with an MCP client, add it to your MCP configuration file.

Add the following configuration (adjust the path to your binary):

{
  "mcpServers": {
    "gemara-mcp": {
      "command": "/absolute/path/to/gemara-mcp/bin/gemara-mcp",
      "args": ["serve"]
    }
  }
}

Using Docker

If running from Docker, use:

{
  "mcpServers": {
    "gemara-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/gemaraproj/gemara-mcp:latest",
        "serve"
      ]
    }
  }
}

Server Modes

The server operates in one of two modes, selected with the --mode flag (default: artifact).

Mode Purpose
advisory Read-only analysis and validation of existing artifacts
artifact All advisory capabilities plus guided artifact creation wizards 
gemara-mcp serve --mode advisory
gemara-mcp serve --mode artifact

Available Tools, Resources, and Prompts

Tools

Tool Description
validate_gemara_artifact Validate YAML content against Gemara CUE schema definitions
migrate_gemara_artifact Migrate a Gemara artifact to v1 schema using CUE transformations

Resources

Resource URI Description
gemara://about LLM-optimized overview of Gemara: the seven-layer model, artifact types, schemas, and SDKs. Fetched from the website with an embedded offline fallback
gemara://lexicon Term definitions for the Gemara security model
gemara://schema/definitions CUE schema definitions for all Gemara artifact types (latest version)
gemara://schema/definitions{?version} CUE schema definitions for a specific Gemara module version

Prompts (artifact mode only)

Prompt Description
threat_assessment Interactive wizard for creating a Gemara-compatible Threat Catalog
control_catalog Interactive wizard for creating a Gemara-compatible Control Catalog
migration Interactive wizard that guides you through migrating Gemara artifacts from v0 to v1 schema

Verifying Artifacts

Released artifacts include SLSA build provenance attestations generated via GitHub Actions OIDC. Binary archives also include SPDX SBOMs, each with its own attestation.

Container images

gh attestation verify oci://ghcr.io/gemaraproj/gemara-mcp:<TAG> \
  --repo gemaraproj/gemara-mcp

Binary archives

gh attestation verify gemara-mcp_Linux_x86_64.tar.gz \
  --repo gemaraproj/gemara-mcp

Building Docker Image

docker build --build-arg VERSION=$(git describe --tags --always) --build-arg BUILD=$(git rev-parse --short HEAD) -t gemara-mcp .

相关 MCP