command-verification — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited command-verification (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Verified knowledge base of 1,254 Ceph CLI commands and 2,660 config parameters for Ceph 20.2.1 (Tentacle). Ships pre-generated — no Ceph cluster needed to use.
Exposes an MCP server and REST API so AI agents can verify commands, configs, and review test scripts before generating automation. Eliminates command hallucinations.
git clone https://github.com/pdhiran/ceph-command-kb.git
cd ceph-command-kb
pip install -e .Choose the integration that matches your agent:
Cursor — add to ~/.cursor/mcp.json:
{
"mcpServers": {
"ceph-cmd-kb": {
"command": "python3",
"args": ["-m", "ceph_command_kb.server.mcp_server", "--kb-path", "/path/to/ceph-command-kb/knowledge/ceph-20.2.1-tentacle"],
"cwd": "/path/to/ceph-command-kb"
}
}
}Restart Cursor. The MCP server starts automatically.
Claude Desktop / Continue / Cline / Windsurf / IBM Bob — all connect via SSE:
python -m ceph_command_kb.server.mcp_server --transport sse --host 0.0.0.0 --port 8081Configure your agent to connect to http://localhost:8081/sse:
{
"mcpServers": {
"ceph-cmd-kb": {
"url": "http://localhost:8081/sse",
"transport": "sse"
}
}
}For Claude Desktop: add to claude_desktop_config.json. For Bob: add to .bob/mcp.json. For Continue/Cline/Windsurf: use the MCP settings UI.
LangChain / CrewAI / CI pipelines / custom scripts — use the REST API:
python -m ceph_command_kb.server.rest_api --host 0.0.0.0 --port 9090# Verify a command
curl -X POST http://localhost:9090/api/verify_command \
-H "Content-Type: application/json" \
-d '{"command": "ceph osd pool create"}'
# Verify a config parameter
curl -X POST http://localhost:9090/api/verify_config \
-H "Content-Type: application/json" \
-d '{"name": "osd_pool_default_size"}'
# Search commands
curl -X POST http://localhost:9090/api/search_commands \
-H "Content-Type: application/json" \
-d '{"query": "nfs cluster create"}'
# Review a test script
curl -X POST http://localhost:9090/api/review_test \
-H "Content-Type: application/json" \
-d '{"script_content": "ceph osd pool create mypool 32\nrbd create img --size 1024"}'
# Health check
curl http://localhost:9090/healthAdditional integration guides:
Once connected, agents automatically verify Ceph commands against the KB. You can also ask directly:
| Tool | Purpose |
|---|---|
verify_command | Verify command + flags + arguments exist |
find_command | Look up a command by exact name |
search_commands | Search across names and descriptions |
list_subcommands | List subcommands under a prefix |
search_flag | Find which commands accept a flag |
search_argument | Find commands by argument name |
get_help | Get parsed help metadata |
get_raw_help | Get original help text |
get_examples | Get usage examples |
list_versions | List available KB versions |
find_binary | List all commands for a binary |
search_keyword | Search by keyword |
| Tool | Purpose |
|---|---|
verify_config | Verify config exists, get type/default/constraints |
search_config | Search config parameters by name or description |
get_config_help | Get full config metadata |
list_configs_by_section | List all configs for a subsystem (e.g., osd, rgw) |
| Tool | Purpose |
|---|---|
validate_script | Quick check — extract and verify commands |
review_test | Full review — verification, flags, cleanup, risk, duplicates |
ceph, rbd, rados, cephadm, ceph-volume, ceph-authtool, ceph-bluestore-tool, ceph-objectstore-tool, crushtool, monmaptool, osdmaptool
Three specialized MCPs work together as the Ceph Engineering Intelligence Platform:
| MCP | Purpose | SSE Port | Repo |
|---|---|---|---|
| ceph-cmd-kb | Commands, configs, test validation | 8081 | ceph-command-kb |
| ceph-doc-kb | Documentation search, code examples | 8082 | ceph-doc-kb |
| ceph-issue-kb | Known issues, workarounds, fixes | 8083 | ceph-issue-kb |
Start all three for SSE clients (Bob, Claude Desktop, etc.):
python -m ceph_command_kb.server.mcp_server --transport sse --port 8081 &
python -m ceph_doc_kb.server.mcp_server --transport sse --port 8082 &
python -m ceph_issue_kb.server.mcp_server --transport sse --port 8083 &Combined agent config (.bob/mcp.json, claude_desktop_config.json, etc.):
{
"mcpServers": {
"ceph-cmd-kb": { "url": "http://localhost:8081/sse", "transport": "sse" },
"ceph-doc-kb": { "url": "http://localhost:8082/sse", "transport": "sse" },
"ceph-issue-kb": { "url": "http://localhost:8083/sse", "transport": "sse" }
}
}Agents call whichever MCP has the right tools — the LLM decides automatically.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.