678e052315
- New src/prompt_guard/ package with pydantic-ai Agent + 7 fake tools (read_file, write_file, list_directory, execute_shell, make_http_request, send_email, query_database) that return plausible but harmless responses - Injection detected when the model makes any tool call; content is blocked entirely (never returned to caller), all calls logged at WARNING level - Config via PROMPT_GUARD_* env vars (pydantic-settings); system prompt deliberately encourages tool use to maximise detection sensitivity - server.py: SEARXNG_GUARD_ENABLED flag (default false) + guard call in _fetch_and_extract; blocked content is not stored in the cache - Fix Settings.extra='ignore' on both Settings classes so PROMPT_GUARD_* and SEARXNG_* vars don't cause validation errors in the other class - Fix _build_model: use explicit OpenAIProvider when api_key is set so PROMPT_GUARD_API_KEY from .env is honoured (pydantic-settings does not populate os.environ, so pydantic-ai's auto-provider couldn't find it)
23 lines
526 B
TOML
23 lines
526 B
TOML
[project]
|
|
name = "searxng-mcp"
|
|
version = "0.1.0"
|
|
description = "MCP server exposing SearxNG web search as a tool"
|
|
readme = "README.md"
|
|
authors = [
|
|
{ name = "Hans Aschauer", email = "hans.git@ch23.de" }
|
|
]
|
|
requires-python = ">=3.14"
|
|
dependencies = [
|
|
"fastmcp>=3.2.4",
|
|
"httpx>=0.28.1",
|
|
"pydantic-ai>=0.3.0",
|
|
"pydantic-settings>=2.13.1",
|
|
"trafilatura>=2.0.0",
|
|
]
|
|
|
|
[project.scripts]
|
|
searxng-mcp = "searxng_mcp.__main__:main"
|
|
|
|
[build-system]
|
|
requires = ["uv_build>=0.10.8,<0.11.0"]
|
|
build-backend = "uv_build"
|