Merge pull request #210 from websentry-ai/vv/mcp-fingerprint-coverage

scan: forward script_content from server config to scan object

Author: zeus-12

scripts/coding_discovery_tools/scan_single_mcp_server.py

@@ -28,7 +28,15 @@ def _normalize_url(url):
 def scan_one(server_name, server_config):
     """Scan a single server; returns the per-server object {name, command, url, args, scan}."""
     servers = transform_mcp_servers_to_array({server_name: server_config})
-    return servers[0] if servers else None
+    obj = servers[0] if servers else None
+    # Forward the base64 script body the hook attached for local-script servers
+    # (it resolved the path with cwd; we run detached without it). The backend
+    # recomputes sha256 -> `script:<hash>` fingerprint and stores the body.
+    if obj is not None and isinstance(server_config, dict) and server_config.get('script_content'):
+        obj['script_content'] = server_config['script_content']
+        print(f"info: forwarding script_content ({len(server_config['script_content'])} b64 chars) for {server_name}",
+              file=sys.stderr)
+    return obj
 
 
 def _curl_config_quote(value):
@@ -103,12 +111,6 @@ def main():
         print(f"error: scan produced no result [{ctx}]", file=sys.stderr)
         return 1
 
-    scan = server_obj.get("scan") or {}
-    if not (scan.get("tools") or []):
-        reason = (scan.get("error") or {}).get("code") or "no tools"
-        print(f"skip: not reporting ({reason}, tools=0) [{ctx}]", file=sys.stderr)
-        return 0
-
     try:
         result = report(args.domain, args.api_key, server_obj)
     except Exception as e: