safebreach-mcp: Instructions file for Claude Code

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

🚨 SECURITY FIRST - CRITICAL FOR CLAUDE

IMPORTANT: Claude should always be launched using the secure launcher to ensure full project context and security awareness:

# ALWAYS use this command to launch Claude:
./claude-launcher.sh

This ensures Claude has:

• ✅ Complete project architecture and best practices knowledge
• ✅ Security context and awareness of token handling rules
• ✅ Current git status and environment configuration
• ✅ Pre-validated secure working environment

NEVER commit real secrets:

• Use placeholders like your-token-here, REPLACE_WITH_ACTUAL_TOKEN
• Use environment variables: ${API_TOKEN}, $SAFEBREACH_TOKEN
• Pre-commit hooks will automatically scan for and block real secrets

📚 See TEAM_WORKFLOW.md for complete security practices and development workflow.

Development Commands

Running the Multi-Server Architecture (Recommended):

# Run all servers concurrently on ports 8000-8003 (localhost-only, secure default)
uv run start_all_servers.py


# External connection support (requires authentication token)
SAFEBREACH_MCP_AUTH_TOKEN="your-secure-token" uv run start_all_servers.py --external

# External connections for specific servers only
SAFEBREACH_MCP_AUTH_TOKEN="your-token" uv run start_all_servers.py --external-data --external-utilities

# Get help with all external connection options
uv run start_all_servers.py --help

# Custom base URL for reverse proxy deployment (the streamable-http endpoint becomes /api/mcp instead of /mcp)
SAFEBREACH_MCP_BASE_URL="/api/mcp" uv run start_all_servers.py

# Combined configuration with external access and custom base URL
SAFEBREACH_MCP_AUTH_TOKEN="your-token" SAFEBREACH_MCP_BASE_URL="/api/mcp" uv run start_all_servers.py --external

# Single-tenant deployment (SafeBreach internal use)
export DATA_URL="http://localhost:3400"
export CONFIG_URL="http://localhost:3401" 
export SIEM_URL="http://localhost:3402"
export ACCOUNT_ID="your-account-id"
export console_name_apitoken="your-api-token"
uv run start_all_servers.py