
PT Application Inspector MCP
io.github.POSIdev-community由 GitHub 帳號 POSIdev-community 發布v1.0.2更新於 Oct 24, 2026
Standalone launcher and agent integration for the PT Application Inspector MCP proxy.
概覽
一個本機啟動器,用來安裝、設定並啟動 PT Application Inspector MCP 代理,供 AI 程式開發助理使用。
- 可以做什麼
- 透過命令列安裝、更新、查看狀態與解除安裝 PT Application Inspector 分析器套件,並在已安裝版本與套件預期版本不一致時提出警告。為 Cursor、Claude Desktop、Claude Code、Windsurf、Codex、Gemini CLI、OpenCode 等支援的助理設定 MCP 與 hooks 項目,保留既有設定,只移除 PTAI 自己的項目。為沒有內建轉接器的用戶端產生包含 MCP、hooks 與 agent 規則範例的自訂助理設定指南。啟動 MCP 代理,並將額外參數直接傳遞給它。
- 適用情境
- 當你希望 AI 程式開發助理搭配 Positive Technologies Application Inspector 運作,並需要以受支援的方式安裝分析器套件、把 MCP 代理註冊到助理設定時使用。
- 執行需求
- 需要 Node.js 18 或更新版本,透過 npx 執行。必須在平台對應的套件目錄中安裝 PT Application Inspector 分析器套件,install 命令會從 PT 端點下載該套件。下載以及 npx 取得套件都需要網路存取。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 PT Application Inspector MCP,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
@posidev-community/ptai-mcp
Standalone CLI launcher for the PT Application Inspector MCP.
Publication identities
The public npm package and the MCP Registry entry intentionally use different identifiers:
server.json is the MCP Registry manifest. It describes how clients discover
and launch the npm package; it is not read by the launcher at runtime.
Requirements
- Node.js 18 or newer
- A PT Application Inspector bundle installed in the platform-specific bundle directory
Usage
Install the package with npm and start the MCP:
The start command fails fast when the MCP is not installed. Download and
install the analyzer bundle with:
Installation stops running analyzer processes, downloads the configured bundle,
and unpacks it into the platform bundle directory. The production endpoint is
checked first; development builds may be available only from the PT test
endpoint. Agent configuration can then be managed with configure.
If one of the trusted PT installer endpoints presents an untrusted TLS certificate, the CLI asks for
explicit confirmation before disabling certificate verification for that
download only. In a trusted, non-interactive development environment the same
choice can be supplied explicitly with PTAI_MCP_ALLOW_INSECURE_TLS=1:
Do not set this variable for untrusted endpoints or routine production use.
Other commands:
configure offers separate MCP and hooks selections for Cursor, Claude
Desktop, Claude Code, Windsurf, Kimi Code, Codex, Antigravity, Gemini CLI, and OpenCode.
Existing JSON/JSONC/TOML settings, and unrelated hooks are preserved. Agent
configuration is supported on Windows, macOS, and Linux. Only agents with a
detected configuration directory are shown. MCP servers are selected first;
the hooks step then lists only the selected agents that support hooks. Space
toggles a selection and Enter confirms it. Deselecting an agent removes only
the PTAI-owned entries from that agent's configuration. An empty selection is
applied immediately without an additional confirmation prompt.
The same menu can generate a custom-agent setup guide at
~/.ptai-mcp/PT_AI_Custom_Agent_Setup.md and offer to open it. The guide
contains MCP, hooks, and agent-rules examples for clients without a built-in
adapter.
Additional arguments after start are passed directly to McpProxy:
The CLI also checks versions.json and warns when the installed bundle
version differs from the bundle version expected by this package.
Bundle locations
The MCP executable is named McpProxy.exe on Windows and McpProxy on
Linux/macOS.
Running locally
From the source tree
Install dependencies, build the CLI, and invoke the entry point directly:
Install the analyzer bundle before starting:
On Windows PowerShell, the equivalent entry point is
node .\bin\ptai-mcp.js.
From a local npm artifact
Build the publishable archive first:
Use the filename printed by npm pack (the current version produces
posidev-community-ptai-mcp-1.0.0.tgz):
On Windows PowerShell, use the local path form:
Agent configuration generated by configure uses the published package name via
npx, so automatic agent startup through that configuration requires the
package to be available in the npm registry.
Licensing
The source code of this npm package is licensed under the MIT License; see
LICENSE.
The PT Application Inspector analyzer bundle downloaded by install and
update, including McpProxy and accompanying components, is proprietary
software and is not covered by the MIT License. Its use is subject to the
applicable Positive Technologies license agreement. This package does not
grant additional rights to use, modify, or redistribute that bundle.
Development
Run the test suite with:
Run the suite with enforced coverage thresholds and generate the HTML report:
Before publishing, run the complete release verification:
Build the publishable npm artifact locally:
This runs the complete verification first and creates a .tgz package in the
repository root. The generated archive is a release artifact and is ignored by
Git.
Validate the packed artifact in a clean temporary npm installation:
The package version is the single source of truth. server.json is synchronized
from package.json during packing and checked by npm run verify. The manifest
also checks that its MCP Registry name matches package.json.mcpName and that
its npm package entry matches the package name and version.
來源:README.md,提交 c8971b5
工具
0版本歷史
2- v1.0.2最新Oct 20, 2026
- v1.0.1Oct 16, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分