
PT Application Inspector MCP
io.github.POSIdev-community由 GitHub 账号 POSIdev-community 发布v1.0.2更新于 Oct 24, 2026
Standalone launcher and agent integration for the PT Application Inspector MCP proxy.
概览
一个本地启动器,用于安装、配置并启动 PT Application Inspector MCP 代理,供 AI 编程助手使用。
- 可以做什么
- 通过命令行安装、更新、查看状态和卸载 PT Application Inspector 分析器包,并在已安装版本与包期望版本不一致时给出警告。为 Cursor、Claude Desktop、Claude Code、Windsurf、Codex、Gemini CLI、OpenCode 等受支持的助手配置 MCP 与 hooks 条目,保留现有设置,仅移除 PTAI 自己的条目。为没有内置适配器的客户端生成包含 MCP、hooks 和 agent 规则示例的自定义助手配置指南。启动 MCP 代理,并将额外参数直接传递给它。
- 适用场景
- 当你希望 AI 编程助手配合 Positive Technologies Application Inspector 工作,并需要以受支持的方式安装分析器包、把 MCP 代理注册到助手配置中时使用。
- 运行要求
- 需要 Node.js 18 或更高版本,通过 npx 运行。必须在平台对应的包目录中安装 PT Application Inspector 分析器包,install 命令会从 PT 端点下载该包。下载以及 npx 获取软件包都需要网络访问。
安装
在 SourceWeft 中
- 打开 控制台中的 PT Application Inspector MCP,将其添加到工作区。
- 为需要使用其工具的对话启用该服务。
Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。
其他 MCP 客户端
参照 仓库 中的启动说明。
README
@posidev-community/ptai-mcp
Standalone CLI launcher for the PT Application Inspector MCP.
Publication identities
The public npm package and the MCP Registry entry intentionally use different identifiers:
server.json is the MCP Registry manifest. It describes how clients discover
and launch the npm package; it is not read by the launcher at runtime.
Requirements
- Node.js 18 or newer
- A PT Application Inspector bundle installed in the platform-specific bundle directory
Usage
Install the package with npm and start the MCP:
The start command fails fast when the MCP is not installed. Download and
install the analyzer bundle with:
Installation stops running analyzer processes, downloads the configured bundle,
and unpacks it into the platform bundle directory. The production endpoint is
checked first; development builds may be available only from the PT test
endpoint. Agent configuration can then be managed with configure.
If one of the trusted PT installer endpoints presents an untrusted TLS certificate, the CLI asks for
explicit confirmation before disabling certificate verification for that
download only. In a trusted, non-interactive development environment the same
choice can be supplied explicitly with PTAI_MCP_ALLOW_INSECURE_TLS=1:
Do not set this variable for untrusted endpoints or routine production use.
Other commands:
configure offers separate MCP and hooks selections for Cursor, Claude
Desktop, Claude Code, Windsurf, Kimi Code, Codex, Antigravity, Gemini CLI, and OpenCode.
Existing JSON/JSONC/TOML settings, and unrelated hooks are preserved. Agent
configuration is supported on Windows, macOS, and Linux. Only agents with a
detected configuration directory are shown. MCP servers are selected first;
the hooks step then lists only the selected agents that support hooks. Space
toggles a selection and Enter confirms it. Deselecting an agent removes only
the PTAI-owned entries from that agent's configuration. An empty selection is
applied immediately without an additional confirmation prompt.
The same menu can generate a custom-agent setup guide at
~/.ptai-mcp/PT_AI_Custom_Agent_Setup.md and offer to open it. The guide
contains MCP, hooks, and agent-rules examples for clients without a built-in
adapter.
Additional arguments after start are passed directly to McpProxy:
The CLI also checks versions.json and warns when the installed bundle
version differs from the bundle version expected by this package.
Bundle locations
The MCP executable is named McpProxy.exe on Windows and McpProxy on
Linux/macOS.
Running locally
From the source tree
Install dependencies, build the CLI, and invoke the entry point directly:
Install the analyzer bundle before starting:
On Windows PowerShell, the equivalent entry point is
node .\bin\ptai-mcp.js.
From a local npm artifact
Build the publishable archive first:
Use the filename printed by npm pack (the current version produces
posidev-community-ptai-mcp-1.0.0.tgz):
On Windows PowerShell, use the local path form:
Agent configuration generated by configure uses the published package name via
npx, so automatic agent startup through that configuration requires the
package to be available in the npm registry.
Licensing
The source code of this npm package is licensed under the MIT License; see
LICENSE.
The PT Application Inspector analyzer bundle downloaded by install and
update, including McpProxy and accompanying components, is proprietary
software and is not covered by the MIT License. Its use is subject to the
applicable Positive Technologies license agreement. This package does not
grant additional rights to use, modify, or redistribute that bundle.
Development
Run the test suite with:
Run the suite with enforced coverage thresholds and generate the HTML report:
Before publishing, run the complete release verification:
Build the publishable npm artifact locally:
This runs the complete verification first and creates a .tgz package in the
repository root. The generated archive is a release artifact and is ignored by
Git.
Validate the packed artifact in a clean temporary npm installation:
The package version is the single source of truth. server.json is synchronized
from package.json during packing and checked by npm run verify. The manifest
also checks that its MCP Registry name matches package.json.mcpName and that
its npm package entry matches the package name and version.
来源:README.md,提交 c8971b5
工具
0版本历史
2- v1.0.2最新Oct 20, 2026
- v1.0.1Oct 16, 2026
评分
已满足适用检查项的 50%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通25 分
请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。
- 已声明认证方式10 分
请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分