silk-security/armis-knowledge-mcp

MCP variant, PROD environment (knowledge-mcp.moose.armis.com). Adds /knowledge, /ask, /cwe-fix, /cwe-fix-report, /framework-guidance, and /tech-guidance. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET; exchanges them for a short-lived JWT on startup (tenant routing resolved server-side). Tenant isolation enforced server-side; no knowledge data stored on disk.

MCP variant, DEV environment (knowledge-mcp.moose-dev.armis.com). Adds /knowledge-dev, /ask-dev, /cwe-fix-dev, /cwe-fix-report-dev, /framework-guidance-dev, and /tech-guidance-dev. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET; exchanges them for a short-lived JWT on startup (tenant routing resolved server-side). Tenant isolation enforced server-side; no knowledge data stored on disk.

Shell-skills variant, PROD environment (knowledge-api.moose.armis.com). Same /knowledge, /cwe-fix, /cwe-fix-report, /framework-guidance, /tech-guidance commands as the MCP variant, but implemented as pure shell skills that hit the REST API directly via curl — no MCP runtime, no Python install. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET. Claude Code only. Don't install alongside armis-knowledge — same slash commands.

Shell-skills variant, DEV environment (knowledge-api.moose-dev.armis.com). Same /knowledge-dev, /cwe-fix-dev, /cwe-fix-report-dev, /framework-guidance-dev, /tech-guidance-dev commands as the MCP variant, but implemented as pure shell skills that hit the REST API directly via curl — no MCP runtime, no Python install. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET. Claude Code only. Don't install alongside armis-knowledge-dev — same slash commands.

Shell-skills variant, STAGE environment (knowledge-api.moose-stg.armis.com). Same /knowledge-stage, /cwe-fix-stage, /cwe-fix-report-stage, /framework-guidance-stage, /tech-guidance-stage commands as the MCP variant, but implemented as pure shell skills that hit the REST API directly via curl — no MCP runtime, no Python install. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET. Claude Code only. Don't install alongside armis-knowledge-stage — same slash commands.

MCP variant, STAGE environment (knowledge-mcp.moose-stg.armis.com). Adds /knowledge-stage, /ask-stage, /cwe-fix-stage, /cwe-fix-report-stage, /framework-guidance-stage, and /tech-guidance-stage. Reads ARMIS_CLIENT_ID and ARMIS_CLIENT_SECRET; exchanges them for a short-lived JWT on startup (tenant routing resolved server-side). Tenant isolation enforced server-side; no knowledge data stored on disk.