意图感知安全层

# Clone and setup
git clone <repository-url>
cd mcpgw

# One-command setup (installs Ollama, pulls models, sets up environment)
./setup.sh

# Start all services
./start.sh

# Run complete demonstration
./demo.sh

# Client declares intent
client_intent = {
    "purpose": "I need weather data for travel planning",
    "constraints": ["no_personal_data", "read_only", "public_data_only"],
    "data_requirements": ["current_weather", "forecasts"]
}

# Server registers capability
server_capability = {
    "provides": ["weather_data", "forecasts"],
    "boundaries": ["no_pii", "public_data_only"],
    "supported_operations": ["read"]
}

# LLM analyzes compatibility
compatibility = await analyzer.analyze_intent_compatibility(
    client_intent, server_capability
)

# Contract created if compatible
if compatibility.status == "compatible":
    contract = IntentContract(
        agreed_purpose=client_intent.purpose,
        constraints=client_intent.constraints + compatibility.suggested_constraints
    )

Client Intent: "Weather data for travel planning"
Malicious Request: get_personal_location_history()
MIA Action: ❌ BLOCKED - Violates travel planning intent

Client Constraint: "no_location_tracking"
Server Response: { weather: "sunny", user_location: "37.7749,-122.4194" }
MIA Action: ❌ BLOCKED - Violates no tracking constraint

system_prompt = """You are an AI security analyst specializing in Mutual Intent Agreement (MIA) systems. Your role is to perform deep semantic analysis of client intentions and server capabilities to determine compatibility for secure AI tool interactions.

CORE PRINCIPLES:
1. Semantic Understanding: Analyze the MEANING and PURPOSE behind requests
2. Intent Alignment: Evaluate if client's declared purpose aligns with server capabilities
3. Risk Assessment: Identify potential security, privacy, and misuse risks
4. Constraint Synthesis: Recommend specific constraints to ensure safe interaction"""

┌─────────────────┐    ┌─────────────────┐    ┌─────────────────┐
│   MIA Gateway   │    │  Ollama Client  │    │ Weather Server  │
│                 │    │                 │    │                 │
│ ┌─────────────┐ │    │ ┌─────────────┐ │    │ ┌─────────────┐ │
│ │IntentBroker │ │◄──►│ │LLM Analysis │ │    │ │ MCP Tools   │ │
│ └─────────────┘ │    │ └─────────────┘ │    │ └─────────────┘ │
│ ┌─────────────┐ │    │                 │    │                 │
│ │ Contracts   │ │    │ gpt-oss20b-128k │    │ FastAPI Server  │
│ └─────────────┘ │    │                 │    │                 │
└─────────────────┘    └─────────────────┘    └─────────────────┘
        │                        │                        │
        └────────────────────────┼────────────────────────┘
                                 │
                    ┌─────────────────┐
                    │ Travel Client   │
                    │                 │
                    │ Python Client   │
                    │ Demonstrates    │
                    │ Complete MIA    │
                    └─────────────────┘

# Declare client intent
curl -X POST http://localhost:8000/intent/declare \
  -H "Content-Type: application/json" \
  -d '{
    "purpose": "I need weather data for travel planning",
    "data_requirements": ["current_weather", "forecasts"],
    "constraints": ["no_personal_data", "read_only"]
  }'

# Negotiate contract
curl -X POST http://localhost:8000/intent/negotiate \
  -H "Content-Type: application/json" \
  -d '{
    "client_intent_id": "intent-123",
    "server_capability_id": "weather-server-456"
  }'

# Make validated request
curl -X POST http://localhost:8000/mcp/request \
  -H "Content-Type: application/json" \
  -d '{
    "contract_id": "contract-789",
    "server_name": "weather-server",
    "request": {
      "method": "tools/call",
      "params": {
        "name": "get_current_weather",
        "arguments": {"location": "Paris"}
      }
    }
  }'

# Complete setup (one command)
./setup.sh

# Manual setup
brew install ollama
ollama pull gpt-oss20b-128k
python -m venv venv
source venv/bin/activate
pip install -r requirements.txt

# Start all services
./start.sh

# Stop all services
./stop.sh

# Clean restart
./stop.sh --clean && ./start.sh

# View logs
docker compose -f docker/docker-compose.yml logs -f

# Run demo
./demo.sh

🔐 Demo 1: Basic Mutual Intent Agreement Flow
==============================================
[SUCCESS] Intent declared successfully!
[SUCCESS] Contract negotiated successfully!
[DEMO] Contract ID: b9fc1ff8-be7d-47fd-a6cc-585e698d8abf

🌤️ Demo 2: Intent-Validated MCP Requests
==========================================
[SUCCESS] Weather request validated and processed!
[SUCCESS] Forecast request validated and processed!

🚨 Demo 3: Intent Violation Detection
=====================================
[SUCCESS] Intent violation correctly detected and blocked!
[DEMO] Validation Result: invalid
[DEMO] Reasons: ['The request calls `get_personal_location_history`, which retrieves personal location data.', 'This violates the constraint `no_personal_data_storage`...']