aos-standard/mcp-blast-radius

What it does

MCP BlastRadius Auditor is a static analysis tool that extracts blast radius metrics from your codebase and audits AOS manifest.json files for divergence. It enforces security policies through an Oracle/Permitted/Prohibited gating system, enabling teams to block CI/CD pipelines when security thresholds are violated.

How to set up

Installation is straightforward via pip: pip install mcpblastradius==0.2.0. The tool provides two components: a Stdio MCP server (mcpblastradius) for integration with MCP-compatible platforms, and a CI blocking gate (mcpblastradiusgate) for pipeline integration. Configuration depends on your specific CI/CD system and manifest requirements.

Key features

• Static blast radius extraction and analysis
• AOS manifest.json divergence detection
• Oracle/Permitted/Prohibited policy enforcement
• CI/CD pipeline blocking capabilities
• MCP server integration for AI assistants
• Python-based implementation with pip installation