PT Application Inspector MCP

io.github.POSIdev-community由 GitHub 账号 POSIdev-community 发布v1.0.2更新于 Oct 24, 2026

Standalone launcher and agent integration for the PT Application Inspector MCP proxy.

已验证STDIO仅桌面开发者工具安全与监控

概览

AI 生成的概览

一个本地启动器,用于安装、配置并启动 PT Application Inspector MCP 代理,供 AI 编程助手使用。

可以做什么
通过命令行安装、更新、查看状态和卸载 PT Application Inspector 分析器包,并在已安装版本与包期望版本不一致时给出警告。为 Cursor、Claude Desktop、Claude Code、Windsurf、Codex、Gemini CLI、OpenCode 等受支持的助手配置 MCP 与 hooks 条目,保留现有设置,仅移除 PTAI 自己的条目。为没有内置适配器的客户端生成包含 MCP、hooks 和 agent 规则示例的自定义助手配置指南。启动 MCP 代理,并将额外参数直接传递给它。
适用场景
当你希望 AI 编程助手配合 Positive Technologies Application Inspector 工作,并需要以受支持的方式安装分析器包、把 MCP 代理注册到助手配置中时使用。
运行要求
需要 Node.js 18 或更高版本,通过 npx 运行。必须在平台对应的包目录中安装 PT Application Inspector 分析器包,install 命令会从 PT 端点下载该包。下载以及 npx 获取软件包都需要网络访问。
安装前请注意
install 和 update 命令会停止正在运行的分析器进程、下载并解压软件包到系统包目录。下载的分析器包为专有软件,受单独的 Positive Technologies 许可协议约束,不适用本包的 MIT 许可。PTAI_MCP_ALLOW_INSECURE_TLS 变量会为某次下载关闭 TLS 证书校验,不应在不受信任的端点或日常生产环境中使用。configure 命令会写入助手的配置文件。

安装

在 SourceWeft 中

  1. 打开 控制台中的 PT Application Inspector MCP,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@posidev-community/ptai-mcp

Standalone CLI launcher for the PT Application Inspector MCP.

Publication identities

The public npm package and the MCP Registry entry intentionally use different identifiers:

SurfaceIdentifier
npm package@posidev-community/ptai-mcp
Official MCP Registryio.github.POSIdev-community/ptai-mcp
Local agent configuration keyptai_analyzer

server.json is the MCP Registry manifest. It describes how clients discover and launch the npm package; it is not read by the launcher at runtime.

Requirements

  • Node.js 18 or newer
  • A PT Application Inspector bundle installed in the platform-specific bundle directory

Usage

Install the package with npm and start the MCP:

bash
npx @posidev-community/ptai-mcp start

The start command fails fast when the MCP is not installed. Download and install the analyzer bundle with:

bash
npx @posidev-community/ptai-mcp install

Installation stops running analyzer processes, downloads the configured bundle, and unpacks it into the platform bundle directory. The production endpoint is checked first; development builds may be available only from the PT test endpoint. Agent configuration can then be managed with configure.

If one of the trusted PT installer endpoints presents an untrusted TLS certificate, the CLI asks for explicit confirmation before disabling certificate verification for that download only. In a trusted, non-interactive development environment the same choice can be supplied explicitly with PTAI_MCP_ALLOW_INSECURE_TLS=1:

bash
PTAI_MCP_ALLOW_INSECURE_TLS=1 npx @posidev-community/ptai-mcp install
powershell
$env:PTAI_MCP_ALLOW_INSECURE_TLS = '1'npx @posidev-community/ptai-mcp install

Do not set this variable for untrusted endpoints or routine production use.

Other commands:

bash
npx @posidev-community/ptai-mcp configurenpx @posidev-community/ptai-mcp updatenpx @posidev-community/ptai-mcp statusnpx @posidev-community/ptai-mcp uninstall

configure offers separate MCP and hooks selections for Cursor, Claude Desktop, Claude Code, Windsurf, Kimi Code, Codex, Antigravity, Gemini CLI, and OpenCode. Existing JSON/JSONC/TOML settings, and unrelated hooks are preserved. Agent configuration is supported on Windows, macOS, and Linux. Only agents with a detected configuration directory are shown. MCP servers are selected first; the hooks step then lists only the selected agents that support hooks. Space toggles a selection and Enter confirms it. Deselecting an agent removes only the PTAI-owned entries from that agent's configuration. An empty selection is applied immediately without an additional confirmation prompt.

The same menu can generate a custom-agent setup guide at ~/.ptai-mcp/PT_AI_Custom_Agent_Setup.md and offer to open it. The guide contains MCP, hooks, and agent-rules examples for clients without a built-in adapter.

Additional arguments after start are passed directly to McpProxy:

bash
npx @posidev-community/ptai-mcp start --stdio

The CLI also checks versions.json and warns when the installed bundle version differs from the bundle version expected by this package.

Bundle locations

PlatformDirectory
Windows%LOCALAPPDATA%\Application Inspector Analyzer
Linux~/application-inspector-analyzer
macOS/Library/Application-Inspector-Analyzer

The MCP executable is named McpProxy.exe on Windows and McpProxy on Linux/macOS.

Running locally

From the source tree

Install dependencies, build the CLI, and invoke the entry point directly:

bash
npm cinpm run buildnode ./bin/ptai-mcp.js --help

Install the analyzer bundle before starting:

bash
node ./bin/ptai-mcp.js installnode ./bin/ptai-mcp.js configurenode ./bin/ptai-mcp.js statusnode ./bin/ptai-mcp.js start

On Windows PowerShell, the equivalent entry point is node .\bin\ptai-mcp.js.

From a local npm artifact

Build the publishable archive first:

bash
npm run artifact

Use the filename printed by npm pack (the current version produces posidev-community-ptai-mcp-1.0.0.tgz):

bash
npm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp --helpnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp installnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp configurenpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp statusnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp start

On Windows PowerShell, use the local path form:

powershell
npm exec --yes --package=.\posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp --help

Agent configuration generated by configure uses the published package name via npx, so automatic agent startup through that configuration requires the package to be available in the npm registry.

Licensing

The source code of this npm package is licensed under the MIT License; see LICENSE.

The PT Application Inspector analyzer bundle downloaded by install and update, including McpProxy and accompanying components, is proprietary software and is not covered by the MIT License. Its use is subject to the applicable Positive Technologies license agreement. This package does not grant additional rights to use, modify, or redistribute that bundle.

Development

bash
npm installnpm run build

Run the test suite with:

bash
npm test

Run the suite with enforced coverage thresholds and generate the HTML report:

bash
npm run test:coverage

Before publishing, run the complete release verification:

bash
npm run verify

Build the publishable npm artifact locally:

bash
npm run artifact

This runs the complete verification first and creates a .tgz package in the repository root. The generated archive is a release artifact and is ignored by Git.

Validate the packed artifact in a clean temporary npm installation:

bash
npm run smoke:artifact

The package version is the single source of truth. server.json is synchronized from package.json during packing and checked by npm run verify. The manifest also checks that its MCP Registry name matches package.json.mcpName and that its npm package entry matches the package name and version.

来源:README.md,提交 c8971b5

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

2
  1. v1.0.2最新Oct 20, 2026
  2. v1.0.1Oct 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分