lynk MCP

lynk mcp：人工智能驱动的SBOM和漏洞管理

用于Interlynk API的MCP服务器。此服务器使Claude、Cursor和VS Code Copilot等AI助手能够与您的Lynk组织进行交互，以进行SBOM管理、漏洞跟踪和合规性检查。

快速开始

# Install via Homebrew
brew install interlynk-io/tap/lynk-mcp

# Configure your API token
lynk-mcp configure

# Verify connection
lynk-mcp verify

然后添加到您的AI助手中，开始询问有关SBOM的问题！

为什么是林克？

管理软件供应链安全是复杂的。使用lynk-mcp，您可以使用自然语言：

• 立即查询漏洞 -“显示影响我产品的所有关键CVE”
• 跟踪合规性 -“哪些产品不符合安全策略？”
• 分析漂移 -“这两个版本之间有什么变化？”
• 生成报告 -“为执行团队创建安全摘要”
• 跨SBOM搜索 -“查找我组织中log4j的所有实例”

主要特点

• 自然语言查询：用简单的英语提问
• 多种产品分析：搜索整个组织中的漏洞
• 版本比较：SBOM版本之间的漂移分析
• 合规性跟踪：违反政策和许可证管理
• 适用于所有地方：克劳德桌面，克劳德代码，VS代码，光标，Zed

查询示例

一旦配置了您的AI助手，请尝试以下操作：

弱点分析

"Show me all critical vulnerabilities in my organization"
"List vulnerabilities with KEV (Known Exploited Vulnerabilities) status"
"What vulnerabilities in [product] have a fix available?"
"Which components have the most vulnerabilities?"

搜索特定攻击和CVE

"Are any of my products affected by the XZ backdoor (CVE-2024-3094)?"
"Check if my organization is vulnerable to Log4Shell (CVE-2021-44228)"
"Search for any components affected by CVE-2023-44487 (HTTP/2 Rapid Reset)"
"Find all occurrences of OpenSSL vulnerabilities in my SBOMs"

安全报告

"Generate a security summary for [product] with all critical vulnerabilities"
"Create an executive summary of our vulnerability posture"
"List all components with known vulnerabilities grouped by severity"
"Summarize vulnerability trends between the last two versions"

漂移分析

"Compare the last two versions of [product] and highlight security changes"
"What new vulnerabilities were introduced in the latest version?"
"Show me components that were added or removed between versions"
"Has our security posture improved since the last release?"

政策与合规

"What policies are currently failing for [environment]?"
"Show me all versions that violate security policies"
"List all components using GPL licenses"
"Which products have deprecated licenses?"

组件分析

"Find all instances of log4j across my organization"
"List all components from [vendor]"
"Show me direct vs transitive dependencies in [version]"
"Which components are missing PURL identifiers?"

安装

使用Homebrew（macOS/Linux）

brew install interlynk-io/tap/lynk-mcp

使用Go安装

go install github.com/interlynk-io/lynk-mcp/cmd/lynk-mcp@latest

使用Docker

# Pull from GitHub Container Registry
docker pull ghcr.io/interlynk-io/lynk-mcp:latest

# Run with API token
docker run -e LYNK_API_TOKEN=lynk_live_xxx ghcr.io/interlynk-io/lynk-mcp serve

源自

git clone https://github.com/interlynk-io/lynk-mcp.git
cd lynk-mcp
make build

配置

初始设置

lynk-mcp configure

这将提示：

1. API端点（默认为https://api.interlynk.io/lynkapi)
2. API代币（您的Lynk API密钥： lynk_live_*, lynk_staging_*, lynk_test_*，或 lynk_service_test_*)

令牌安全地存储在您的系统密钥链中。

验证连接

lynk-mcp verify

配置文件

存储在 ~/.lynk-mcp/config.yaml:

api:
  endpoint: "https://api.interlynk.io/lynkapi"
  timeout: 30s
logging:
  level: "info"

环境变量

AI助手设置

克劳德桌面版

添加到您的配置文件中：

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json 视窗: %APPDATA%\Claude\claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "lynk": {
      "command": "lynk-mcp",
      "args": ["serve"]
    }
  }
}

克劳德代码（CLI）

claude mcp add lynk -- lynk-mcp serve

或添加到 ~/.claude/settings.json:

{
  "mcpServers": {
    "lynk": {
      "command": "lynk-mcp",
      "args": ["serve"]
    }
  }
}

VS代码（v1.99+）

增添 settings.json 或 .vscode/mcp.json:

{
  "mcp": {
    "servers": {
      "lynk": {
        "command": "lynk-mcp",
        "args": ["serve"]
      }
    }
  }
}

光标

增添 ~/.cursor/mcp.json:

{
  "mcpServers": {
    "lynk": {
      "command": "lynk-mcp",
      "args": ["serve"]
    }
  }
}

泽德

增添 ~/.config/zed/settings.json:

{
  "context_servers": {
    "lynk": {
      "command": {
        "path": "lynk-mcp",
        "args": ["serve"]
      }
    }
  }
}

将Docker与AI助手结合使用

{
  "mcpServers": {
    "lynk": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-e", "LYNK_API_TOKEN=lynk_live_xxx", "ghcr.io/interlynk-io/lynk-mcp", "serve"]
    }
  }
}

可用工具

组织与产品

版本和组件

漏洞

政策与合规

可用资源

安全

• 存储在系统密钥链中的API令牌（macOS密钥链、Windows凭据管理器、Linux密钥服务）
• 从未记录或公开的令牌
• 所有API通信都使用HTTPS
• Lynk API实施的组织范围界定

发展

先决条件

• 转到1.24或更高版本

建筑

make build          # Build for current platform
make build-all      # Build for all platforms
make test           # Run tests
make lint           # Run linter

项目结构

lynk-mcp/
├── cmd/lynk-mcp/          # CLI entry point
├── internal/
│   ├── api/               # High-level API client
│   ├── config/            # Configuration and keyring
│   ├── graphql/           # GraphQL client and queries
│   └── mcp/               # MCP server implementation
├── Dockerfile             # Multi-platform container build
├── go.mod
├── Makefile
└── README.md

其他Interlynk工具

• sbomqs -SBOM质量评分和合规性
• 骨肉瘤 -SBOM组装器、合并器和编辑器
• Sbomex -搜索并下载公共SBOM
• sbomgr -上下文感知SBOM搜索

许可证

Apache许可证2.0

支持

• 社区Slack
• 电子邮件

______________________________________________________________________

精心制作 Interlynk.io

d