Benjamin Admin 414496c31a feat(mcp): HTTP+Bearer CRA-MCP-Server für den Repo-Scanner + Finding-Adapter ...

Register-Flow für compliance-scanner-agent (anderes Team, Rust): deren MCP-Client
(McpServerConfig) erwartet Streamable HTTP + Bearer — unser MCP war stdio/ohne Auth.
- server.py auf FastMCP umgestellt: Tools cra_assess_findings + cra_list_requirements,
  Dual-Transport (stdio default; Streamable HTTP wenn MCP_PORT gesetzt), Bearer-Gate
  via CRA_MCP_TOKEN.
- ScannerFinding.from_dict tolerant für ihr Finding-Schema (_id/fingerprint,
  scan_type→category, cvss_score→cvss, file_path→location, severity info→low).
- Eigenständiger docker-compose-Dienst bp-compliance-mcp (Port 8099, pure/kein DB,
  isoliert von der Haupt-API) + Hetzner-amd64-Override.
- Tests: test_cra_scanner_adapter, test_mcp_server (Bearer-Gate + Tool-Registry).

Pull-Flow (wir holen ihre Findings über ihren MCP) + öffentliches nginx-Routing
folgen separat (brauchen ihren Endpoint/Token).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-15 18:30:47 +02:00

..

doc_checks

fix(agb): Gewährleistung erkennt 'bei Mängeln' / '§ N Mängel'-Heading

2026-06-11 14:31:41 +02:00

founding_wizard

…

mail_render_v2

feat: Mail-Restrukturierung + B22 Cross-Domain-Doc-Detector

2026-06-08 11:35:55 +02:00

specialist_agents

fix(snapshot): Cookie-Dedup + schneller Impressum-Tab + Tabellen-Zahl

2026-06-11 19:54:15 +02:00

__init__.py

…

_banner_serializers.py

…

_company_profile_sql.py

fix(company-profile): replace :param::jsonb with CAST(:param AS JSONB)

2026-06-07 00:42:16 +02:00

agent_pdf_export.py

…

agent_tools.py

…

ai_act_transparency_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

ai_compliance_assistant.py

…

ai_legal_basis_check.py

feat(b15): AI-Act Rechtsgrundlage-Check (GT AI-ACT-RISK-001)

2026-06-07 00:15:08 +02:00

ai_retention_granularity_check.py

feat: Browser-Matrix C2 + B11 AI-Retention + Impressum-Specialist-Agent + B1 Mobile Playwright

2026-06-06 22:20:25 +02:00

anchor_finder.py

…

assertion_engine.py

…

audit_pdf_generator.py

…

audit_quality_checks.py

…

audit_report.py

feat(audit-report): Exec-Summary, Top-N je Modul, Statistik, Gesamtanalyse

2026-06-13 15:57:07 +02:00

audit_session_service.py

…

audit_signoff_service.py

…

audit_walk_zip_builder.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

auto_risk_updater.py

…

banner_ab_service.py

…

banner_admin_service.py

…

banner_analytics_service.py

…

banner_consent_service.py

…

banner_consistency_checks.py

…

banner_cookie_cross_check.py

…

banner_dsr_service.py

…

banner_screenshot_block.py

…

batch_dedup_runner.py

…

benchmark_extractor.py

feat(audit): P107 Branchen-Benchmark-Cockpit fuer Big-4-Demos

2026-05-22 09:23:37 +02:00

benchmark_k_anonymity.py

…

browser_cross_finding.py

feat(banner): Consent-Historie/Widerruf live erkennen (Borlabs-Stil, #62)

2026-06-13 16:38:38 +02:00

business_profiler.py

…

canonical_control_service.py

…

chatbot_cookie_classification_check.py

feat: B12 Chatbot-Cookie-Klassifikation (#19) + Cookie-Matrix scan + safetykon test

2026-06-06 23:25:20 +02:00

chatbot_policy_discovery.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00

check_replay.py

feat(audit): P106 MC-Audit-Type + P83 BUILD_SHA in Dockerfiles + P80 v2 full

2026-05-22 08:57:02 +02:00

check_snapshot.py

feat(backend): On-demand Browser-Verhaltens-Matrix + Snapshot-Persistenz (Phase 2)

2026-06-12 23:03:28 +02:00

citation_backfill.py

…

cmp_fingerprint_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

company_profile_service.py

fix(company-profile): deserialize JSONB columns in row_to_response

2026-06-07 08:26:14 +02:00

compliance_agent.py

…

compliance_audit_log.py

…

compliance_pdf_generator.py

…

compliance_user_agent.py

…

consent_diff_for_user.py

…

consent_reachability_check.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

control_composer.py

…

control_dedup.py

…

control_export_service.py

…

control_generator.py

…

control_status_machine.py

…

cookie_behavior_validator.py

…

cookie_coherence_check.py

fix(b19): UNK-Noise drastisch reduzieren

2026-06-08 08:20:39 +02:00

cookie_compliance_audit.py

…

cookie_csv_exporter.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

cookie_declaration_diff.py

feat(cookie): Deklaration-vs-Bibliothek-Diff-Sicht + Funnel-KPI

2026-06-11 21:00:50 +02:00

cookie_function_classifier.py

…

cookie_knowledge_db.py

…

cookie_knowledge_extended.py

…

cookie_knowledge.py

…

cookie_library_check.py

fix(cookie): Präfix-Matcher über-matcht kurze generische Basen nicht mehr

2026-06-11 21:26:47 +02:00

cookie_library_lookup.py

fix(b19): UNK-Noise drastisch reduzieren

2026-06-08 08:20:39 +02:00

cookie_library_mismatch.py

…

cookie_link_validator.py

…

cookie_network_tracer.py

…

cookie_observation_logger.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

cookie_policy_architecture.py

…

cookie_screenshot_ocr_engines.py

refactor: split cookie_screenshot_ocr.py (642 → 290 + 353 LOC)

2026-06-06 23:35:33 +02:00

cookie_screenshot_ocr.py

refactor: split cookie_screenshot_ocr.py (642 → 290 + 353 LOC)

2026-06-06 23:35:33 +02:00

cookie_storage_inventory.py

feat(cookie+routing): Storage-Typ-Filter + legal_notice capture-only

2026-06-11 20:45:18 +02:00

cookie_table_generator.py

…

cookie_to_vendor_fallback.py

…

cookie_value_entropy.py

…

cookies_table_parser.py

fix(cookies): parse_flat_cookie_text whitespace-tolerant fuer HTTP-fetch

2026-05-22 19:17:21 +02:00

corpus_overview.py

feat(controls): 5 neue Use Cases + Machinery-Fix + Korpus-/Lizenz-Übersicht

2026-06-14 21:49:22 +02:00

cra_component_findings.py

feat(cra): hardware path — derive cyber findings from networked components

2026-06-14 12:37:22 +02:00

cra_finding_mapper.py

feat(mcp): HTTP+Bearer CRA-MCP-Server für den Repo-Scanner + Finding-Adapter

2026-06-15 18:30:47 +02:00

cra_prioritizer.py

feat(cra): coarse priority engine — P0 floor + customer weights + quick wins

2026-06-14 08:21:56 +02:00

cra_safety_bridge.py

feat(cra): cyber-meets-safety bridge as real logic (step 2)

2026-06-14 08:59:41 +02:00

cra_security_crosswalk.py

feat(cra): NIST/OWASP security golden-set crosswalk + full measure texts in CRA tab

2026-06-13 21:24:53 +02:00

cra_snapshot_store.py

feat(cra): versioned assessment snapshots — CRA Art. 13 running system (step 3)

2026-06-14 09:27:09 +02:00

cra_use_case_controls.py

feat(cra): Befund-Detail aufgeräumt + Rechts-Anker (source_article) sichtbar

2026-06-14 23:14:53 +02:00

cross_doc_dpo_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

cross_doc_reconcile.py

feat(reconcile): B — Cross-Doc-Reconciliation (Pflicht in anderem Doc erfüllt)

2026-06-11 15:42:16 +02:00

cross_domain_doc_check.py

fix: 4 Bugs gemeinsam — B22 PDF + B17 Walk-Fallback + company_name + Plausibility-Fallback

2026-06-08 16:39:33 +02:00

decomposition_pass.py

…

doc_anchor_locator.py

…

doc_input_warnings.py

…

doc_staleness_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

doc_text_signals.py

…

doc_type_classifier.py

…

dse_matcher.py

…

dse_parser.py

…

dse_service_extractor.py

…

dsfa_service.py

…

dsfa_workflow_service.py

…

dsi_document_checker.py

…

dsms_client.py

…

dsr_art11_service.py

…

dsr_export_service.py

…

dsr_service.py

…

dsr_workflow_service.py

…

email_delivery_service.py

…

email_template_service.py

…

email_template_version_service.py

…

evidence_service.py

…

evidence_zip_builder.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

export_generator.py

…

finding_action_recipes.py

…

finding_confidence.py

…

finding_plausibility_check.py

fix: 4 Bugs gemeinsam — B22 PDF + B17 Walk-Fallback + company_name + Plausibility-Fallback

2026-06-08 16:39:33 +02:00

framework_decomposition.py

…

gf_one_pager.py

…

impressum_multi_entity_check.py

fix(b9)+test: real-world false-positives + multi-site GT-bench

2026-06-07 17:51:17 +02:00

incident_service.py

…

incident_workflow_service.py

…

industry_benchmark.py

…

industry_library.py

…

intake_extractor.py

…

isms_assessment_service.py

…

isms_findings_service.py

…

isms_governance_service.py

…

isms_readiness_service.py

…

jc_avv_decision.py

…

legacy_url_cdx.py

feat(crawl): Vollstaendigkeit — Shadow-DOM/versteckte Links + Interaktions-Fixpunkt + Wayback-CDX-Orphans

2026-06-09 12:33:34 +02:00

legacy_url_discovery.py

feat(crawl): Vollstaendigkeit — Shadow-DOM/versteckte Links + Interaktions-Fixpunkt + Wayback-CDX-Orphans

2026-06-09 12:33:34 +02:00

legal_basis_validator.py

…

legal_document_consent_service.py

…

legal_document_service.py

feat(document-library): zentrale Doc-Übersicht + Workflow-Auto-Select (Phase 3)

2026-06-08 09:32:25 +02:00

license_gate.py

…

llm_cascade.py

fix(scan): TCF SQL column + cascade diagnose-logs

2026-05-22 19:00:27 +02:00

llm_provider.py

…

mail_pdf_export.py

…

mandatory_content_checker.py

…

mc_audit_type.py

fix(mc-audit): TOM/AVV case-mismatch + Ausnahmen-Pattern Wortabstand

2026-05-22 11:51:03 +02:00

mc_embedding_matcher.py

…

mc_scorecard.py

feat(audit): P106 MC-Audit-Type + P83 BUILD_SHA in Dockerfiles + P80 v2 full

2026-05-22 08:57:02 +02:00

mc_solution_generator.py

perf(audit): vendor_llm_extractor + mc_solution_generator nutzen P31 LLM-Cascade

2026-05-22 09:40:11 +02:00

migration_to_banner.py

…

migration_to_document.py

…

multi_version_dse.py

feat: Plan B + A + C — DSE-Versions-MCs + Legacy-URL + Multi-Version

2026-06-08 10:04:14 +02:00

normative_patterns.py

…

notfallplan_service.py

…

notfallplan_workflow_service.py

…

obligation_extractor.py

…

pattern_matcher.py

…

pdf_extractor.py

…

pipeline_adapter.py

…

profile_extractor.py

feat(agent): Impressum-Tab auf Haupt-Engine + Profil/§36-Fixes

2026-06-10 23:44:01 +02:00

rag_client.py

…

rag_document_checker.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

rag_provenance.py

…

recommendation_service.py

feat(template-rules): backend foundation for profile-based document recommendations

2026-06-06 23:13:50 +02:00

regulation_requirement_service.py

…

regulation_scraper.py

…

relevance_filter.py

…

report_generator.py

…

reranker.py

…

retention_comparator.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

retention_conflict_check.py

fix(b9+b14): Real-World-Smoke-Befunde aus Elli-Audit (2026-06-07)

2026-06-07 08:50:46 +02:00

reverse_audit.py

…

run_diff.py

…

screening_service.py

…

section_splitter.py

…

seeder.py

…

service_detector.py

…

service_registry.py

…

similarity_detector.py

…

smtp_sender.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

source_policy_service.py

…

tcf_encoder_service.py

…

tcf_vendor_authority.py

fix(scan): TCF SQL column + cascade diagnose-logs

2026-05-22 19:00:27 +02:00

tdm_reservation_check.py

…

template_rule_service.py

feat(template-rules): backend foundation for profile-based document recommendations

2026-06-06 23:13:50 +02:00

tom_service.py

…

training_link_service.py

…

transfer_mechanism_check.py

feat: Browser-Matrix Stufe 1.a + 2 weitere GT-Findings + Plausibility-LLM-Härtung

2026-06-06 21:42:27 +02:00

unified_findings_collector.py

…

unified_findings_store.py

…

url_slug_drift_check.py

feat(b16): Footer-Label-vs-URL-Slug-Drift-Check (GT URL-STRUCTURE-001)

2026-06-07 00:23:25 +02:00

use_case_controls.py

feat(cra): Befund-Detail aufgeräumt + Rechts-Anker (source_article) sichtbar

2026-06-14 23:14:53 +02:00

v1_enrichment.py

…

vendor_assessment_cross_check.py

…

vendor_assessment_report.py

…

vendor_banner_sync.py

…

vendor_classifier.py

…

vendor_compliance_extra_service.py

…

vendor_compliance_service.py

…

vendor_compliance_sub_service.py

…

vendor_consistency_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

vendor_cost_estimator.py

…

vendor_extractor.py

…

vendor_llm_extractor.py

perf(llm): reduce vendor-extract excerpt 50k → 20k chars

2026-05-22 21:55:23 +02:00

vendor_normalizer.py

…

vendor_package_cookies.py

…

vendor_redundancy.py

…

vendor_vvt_mapper.py

…

vvt_service.py

…

website_compliance_checks.py

…

website_scanner.py

…

widerrufsbelehrung_reachability_check.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00