PT Application Inspector MCP

io.github.POSIdev-community由 GitHub 帳號 POSIdev-community 發布v1.0.2更新於 Oct 24, 2026

Standalone launcher and agent integration for the PT Application Inspector MCP proxy.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

一個本機啟動器,用來安裝、設定並啟動 PT Application Inspector MCP 代理,供 AI 程式開發助理使用。

可以做什麼
透過命令列安裝、更新、查看狀態與解除安裝 PT Application Inspector 分析器套件,並在已安裝版本與套件預期版本不一致時提出警告。為 Cursor、Claude Desktop、Claude Code、Windsurf、Codex、Gemini CLI、OpenCode 等支援的助理設定 MCP 與 hooks 項目,保留既有設定,只移除 PTAI 自己的項目。為沒有內建轉接器的用戶端產生包含 MCP、hooks 與 agent 規則範例的自訂助理設定指南。啟動 MCP 代理,並將額外參數直接傳遞給它。
適用情境
當你希望 AI 程式開發助理搭配 Positive Technologies Application Inspector 運作,並需要以受支援的方式安裝分析器套件、把 MCP 代理註冊到助理設定時使用。
執行需求
需要 Node.js 18 或更新版本,透過 npx 執行。必須在平台對應的套件目錄中安裝 PT Application Inspector 分析器套件,install 命令會從 PT 端點下載該套件。下載以及 npx 取得套件都需要網路存取。
安裝前請注意
install 與 update 命令會停止執行中的分析器程序、下載並解壓縮套件到系統套件目錄。下載的分析器套件為專有軟體,受另外的 Positive Technologies 授權條款規範,不適用本套件的 MIT 授權。PTAI_MCP_ALLOW_INSECURE_TLS 變數會針對某次下載關閉 TLS 憑證驗證,不應在不受信任的端點或日常正式環境中使用。configure 命令會寫入助理的設定檔。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 PT Application Inspector MCP,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@posidev-community/ptai-mcp

Standalone CLI launcher for the PT Application Inspector MCP.

Publication identities

The public npm package and the MCP Registry entry intentionally use different identifiers:

SurfaceIdentifier
npm package@posidev-community/ptai-mcp
Official MCP Registryio.github.POSIdev-community/ptai-mcp
Local agent configuration keyptai_analyzer

server.json is the MCP Registry manifest. It describes how clients discover and launch the npm package; it is not read by the launcher at runtime.

Requirements

  • Node.js 18 or newer
  • A PT Application Inspector bundle installed in the platform-specific bundle directory

Usage

Install the package with npm and start the MCP:

bash
npx @posidev-community/ptai-mcp start

The start command fails fast when the MCP is not installed. Download and install the analyzer bundle with:

bash
npx @posidev-community/ptai-mcp install

Installation stops running analyzer processes, downloads the configured bundle, and unpacks it into the platform bundle directory. The production endpoint is checked first; development builds may be available only from the PT test endpoint. Agent configuration can then be managed with configure.

If one of the trusted PT installer endpoints presents an untrusted TLS certificate, the CLI asks for explicit confirmation before disabling certificate verification for that download only. In a trusted, non-interactive development environment the same choice can be supplied explicitly with PTAI_MCP_ALLOW_INSECURE_TLS=1:

bash
PTAI_MCP_ALLOW_INSECURE_TLS=1 npx @posidev-community/ptai-mcp install
powershell
$env:PTAI_MCP_ALLOW_INSECURE_TLS = '1'npx @posidev-community/ptai-mcp install

Do not set this variable for untrusted endpoints or routine production use.

Other commands:

bash
npx @posidev-community/ptai-mcp configurenpx @posidev-community/ptai-mcp updatenpx @posidev-community/ptai-mcp statusnpx @posidev-community/ptai-mcp uninstall

configure offers separate MCP and hooks selections for Cursor, Claude Desktop, Claude Code, Windsurf, Kimi Code, Codex, Antigravity, Gemini CLI, and OpenCode. Existing JSON/JSONC/TOML settings, and unrelated hooks are preserved. Agent configuration is supported on Windows, macOS, and Linux. Only agents with a detected configuration directory are shown. MCP servers are selected first; the hooks step then lists only the selected agents that support hooks. Space toggles a selection and Enter confirms it. Deselecting an agent removes only the PTAI-owned entries from that agent's configuration. An empty selection is applied immediately without an additional confirmation prompt.

The same menu can generate a custom-agent setup guide at ~/.ptai-mcp/PT_AI_Custom_Agent_Setup.md and offer to open it. The guide contains MCP, hooks, and agent-rules examples for clients without a built-in adapter.

Additional arguments after start are passed directly to McpProxy:

bash
npx @posidev-community/ptai-mcp start --stdio

The CLI also checks versions.json and warns when the installed bundle version differs from the bundle version expected by this package.

Bundle locations

PlatformDirectory
Windows%LOCALAPPDATA%\Application Inspector Analyzer
Linux~/application-inspector-analyzer
macOS/Library/Application-Inspector-Analyzer

The MCP executable is named McpProxy.exe on Windows and McpProxy on Linux/macOS.

Running locally

From the source tree

Install dependencies, build the CLI, and invoke the entry point directly:

bash
npm cinpm run buildnode ./bin/ptai-mcp.js --help

Install the analyzer bundle before starting:

bash
node ./bin/ptai-mcp.js installnode ./bin/ptai-mcp.js configurenode ./bin/ptai-mcp.js statusnode ./bin/ptai-mcp.js start

On Windows PowerShell, the equivalent entry point is node .\bin\ptai-mcp.js.

From a local npm artifact

Build the publishable archive first:

bash
npm run artifact

Use the filename printed by npm pack (the current version produces posidev-community-ptai-mcp-1.0.0.tgz):

bash
npm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp --helpnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp installnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp configurenpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp statusnpm exec --yes --package=./posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp start

On Windows PowerShell, use the local path form:

powershell
npm exec --yes --package=.\posidev-community-ptai-mcp-1.0.0.tgz -- ptai-mcp --help

Agent configuration generated by configure uses the published package name via npx, so automatic agent startup through that configuration requires the package to be available in the npm registry.

Licensing

The source code of this npm package is licensed under the MIT License; see LICENSE.

The PT Application Inspector analyzer bundle downloaded by install and update, including McpProxy and accompanying components, is proprietary software and is not covered by the MIT License. Its use is subject to the applicable Positive Technologies license agreement. This package does not grant additional rights to use, modify, or redistribute that bundle.

Development

bash
npm installnpm run build

Run the test suite with:

bash
npm test

Run the suite with enforced coverage thresholds and generate the HTML report:

bash
npm run test:coverage

Before publishing, run the complete release verification:

bash
npm run verify

Build the publishable npm artifact locally:

bash
npm run artifact

This runs the complete verification first and creates a .tgz package in the repository root. The generated archive is a release artifact and is ignored by Git.

Validate the packed artifact in a clean temporary npm installation:

bash
npm run smoke:artifact

The package version is the single source of truth. server.json is synchronized from package.json during packing and checked by npm run verify. The manifest also checks that its MCP Registry name matches package.json.mcpName and that its npm package entry matches the package name and version.

來源:README.md,提交 c8971b5

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

2
  1. v1.0.2最新Oct 20, 2026
  2. v1.0.1Oct 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分