anviod/edgeCore

Start edgeCore backend with README command `go run cmd/main.go`, then MCP initialize + tools/list over streamable HTTP at /api/mcp using a bearer key created through the product's install/login/generate-key/activate APIs. Result: 34 tools listed.

cd <host-path> && ls -la && cat README.md 2>/dev/null | head -200
cd <host-path> && git log -1 --format=%H 2>/dev/null; ls <host-path> 2>/dev/null; echo "CDP=$CDP_URL"; which node npm python3 pip3 go cargo 2>&1
cd <host-path> && head -5 go.mod && cat README.en.md | sed -n '1,200p' | grep -n -i -E "go |mcp|run|quick|npm|build" ; ls cmd; ls docs | head -50; grep -ril "mcp" --include=*.md docs | head; cat <host-path> | head -120
cd <host-path> && (sudo -n true && echo SUDO_OK); apt-cache policy golang-go nodejs 2>/dev/null | head -8; curl -sI https://go.dev/dl/go1.26.4.linux-amd64.tar.gz -m 20 | head -3; curl -sI https://registry.npmjs.org -m 15 | head -1; grep -A3 engines ui/package.json; echo "proxy=$HTTPS_PROXY $https_proxy"
cd /tmp && curl -sL -o go.tgz https://go.dev/dl/go1.26.4.linux-amd64.tar.gz && ls -la go.tgz && sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go.tgz && /usr/local/go/bin/go version
(sudo apt-get update -qq && sudo apt-get install -y -qq nodejs npm) >/tmp/apt.log 2>&1; echo rc=$?; node -v; npm -v
cd <host-path> && export PATH=/usr/local/go/bin:$PATH GOFLAGS=-mod=mod && mkdir -p /tmp/srcsnap && cp go.mod go.sum /tmp/srcsnap/ && (timeout 900 go mod tidy; echo tidy_rc=$?) 2>&1 | tail -15; diff -q go.mod /tmp/srcsnap/go.mod; diff -q go.sum /tmp/srcsnap/go.sum; echo diffdone
cd <host-path> && export NODE_USE_ENV_PROXY=1 && (timeout 900 npm install --no-audit --no-fund >/tmp/npm-install.log 2>&1; echo install_rc=$?) ; tail -5 /tmp/npm-install.log; grep -n '"build"\|"engines"' -A2 package.json | head; cd .. && ls conf 2>&1; grep -n 'flag\.\|mcp' cmd/main.go | head -40
cd <host-path> && (timeout 600 npm run build >/tmp/ui-build.log 2>&1; echo build_rc=$?); tail -8 /tmp/ui-build.log; cd .. && wc -l cmd/main.go && sed -n '1,80p' cmd/main.go
cd <host-path> && grep -rn -i "mcp" --include=*.go internal cmd | grep -i -E "handle|route|path|/mcp|stdio|flag" | head -20; grep -n -i "port\|addr\|listen" cmd/main.go | head; ls docs/guide | grep -i mcp; cat .gitignore | head -30
cd <host-path> && export PATH=/usr/local/go/bin:$PATH && mkdir -p /tmp/edgebin && (timeout 900 go build -o /tmp/edgebin/edgecore ./cmd; echo build_rc=$?) 2>&1 | tail -5; ls -la /tmp/edgebin; grep -rn "api/mcp" --include=*.go internal | head -5; sed -n '1,80p' docs/guide/mcp-access-guide.md
cd <host-path> && export PATH=/usr/local/go/bin:$PATH && nohup go run cmd/main.go > /tmp/edgecore-run.log 2>&1 &
sleep 60; tail -15 /tmp/edgecore-run.log; (ss -ltnp 2>/dev/null | grep -E ':8080|:6060') 
H='-H Content-Type:application/json -H Accept:application/json,text/event-stream'; curl -s -m 20 -i http://127.0.0.1:8080/api/mcp $H -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}' | head -c 1200; echo; echo ---; curl -s -m 20 http://127.0.0.1:8080/api/mcp $H -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}' | head -c 800; echo
cd <host-path> && grep -rn -i "mcp" internal/server/server.go | grep -i "app\.\(get\|post\|put\)" | head; grep -rln -i "apikey\|api_key" internal/server/*.go | head; grep -rn -i "func (s \*Server) handleMCP" -A30 internal/server/*.go | grep -i -E "key|auth|enable" | head -20
cd <host-path> && grep -rn "handleMcpGenerateKey\|handleMcpGetKey\|handleAISettings\|ai/settings\|ai/mcp" internal/server/server.go | head; grep -n "func (s \*Server) mcpCheckAuth" -A25 internal/server/mcp_handler.go | head -40
cd <host-path> && curl -s -m 20 -X POST http://127.0.0.1:8080/api/mcp/generate-key; echo; echo ---; curl -s -m 20 http://127.0.0.1:8080/api/ai/settings | head -c 600; echo; grep -n "JWT\|jwt" internal/server/server.go | head -8
cd <host-path> && sed -n '449,470p' internal/server/server.go; grep -n "func (s \*Server) handleLogin\|api.Post(\"/login\|/auth/login\|api.Post(\"/install\|setup" internal/server/server.go | head
cd <host-path> && curl -s -m 20 http://127.0.0.1:8080/api/install/status; echo; grep -n "func (s \*Server) startInstall" -A40 internal/server/*.go | grep -n "BodyParser\|json:\|Username\|Password\|Admin" | head -20; grep -rn "type InstallRequest\|type installRequest\|type StartInstall" -A15 internal/server/*.go | head -30
cd <host-path> && sed -n '300,400p' internal/server/install_handler.go; grep -n "func (s \*Server) handleLogin" -A30 internal/server/*.go | head -50
cd <host-path> && grep -rn "type InstallConfig struct" -A25 internal/model/*.go; grep -n "type LoginRequest" -A12 internal/server/auth.go; grep -n "func validateInstallConfig" -A30 internal/server/install_handler.go | head -40
cd <host-path> && PW=$(python3 -I -c 'import secrets;print(secrets.token_urlsafe(18))') && echo "$PW" > /tmp/edgecore-admin-pw && chmod 600 /tmp/edgecore-admin-pw && curl -s -m 30 -X POST http://127.0.0.1:8080/api/install/start -H 'Content-Type: application/json' -d "{\"port\":8080,\"username\":\"admin\",\"password\":\"<secret>\",\"storagePath\":\"data\",\"storageBackend\":\"bbolt\",\"gatewayName\":\"smoke-gateway\",\"gatewayLocation\":\"lab\",\"deviceSerial\":\"SMOKE-0001\"}"; echo; sleep 8; curl -s -m 20 http://127.0.0.1:8080/api/install/install-status | head -c 1500; echo; curl -s http://127.0.0.1:8080/api/install/status
cd <host-path> && sed -n '340,380p' internal/server/auth.go; grep -n "func (s \*Server) handleGetNonce" -A12 internal/server/auth.go | head -20
cd /tmp && B=http://127.0.0.1:8080/api && N=$(curl -s -m 20 $B/auth/nonce); echo "nonce resp: $N"; NONCE=$(echo "$N" | python3 -I -c 'import sys,json;d=json.load(sys.stdin);print(d.get("data",{}).get("nonce") if isinstance(d.get("data"),dict) else d.get("data"))'); PW=$(cat /tmp/edgecore-admin-pw); HASH=$(python3 -I -c 'import sys,hashlib;print(hashlib.sha256((sys.argv[1]+sys.argv[2]).encode()).hexdigest())' "$PW" "$NONCE"); L=$(curl -s -m 20 -X POST $B/auth/login -H 'Content-Type: application/json' -d "{\"loginFlag\":true,\"loginType\":\"local\",\"data\":{\"username\":\"admin\",\"password\":\"<secret>\",\"nonce\":\"$NONCE\"}}"); echo "login: $(echo $L | head -c 300)"; TOKEN=<secret> "$L" | python3 -I -c 'import sys,json;d=json.load(sys.stdin);print(d.get("data",{}).get("token","") if isinstance(d.get("data"),dict) else "")'); echo "$TOKEN" > /tmp/edgecore-token; echo tokenlen=${#TOKEN}
cd <host-path> && B=http://127.0.0.1:8080/api; T=$(cat /tmp/edgecore-token); curl -s -m 20 -X POST $B/mcp/generate-key -H "Authorization: <secret>"; echo; sed -n '176,200p' internal/server/ai_settings_handler.go; grep -n "api.Put\|api.Post" internal/server/server.go | grep -i mcp
B=http://127.0.0.1:8080/api; T=$(cat /tmp/edgecore-token); K=b673705af91be5e0e4006fa421e57c09b5fd0b43e3b0f91d3b97ab542ff6317f; curl -s -m 20 -X POST $B/mcp/activate -H "Authorization: <secret>" -H 'Content-Type: application/json' -d "{\"full_access\":false,\"api_key\":\"<secret>\"}"; echo; H='-H Content-Type:application/json -H Accept:application/json,text/event-stream'; curl -s -m 30 http://127.0.0.1:8080/api/mcp -H "Authorization: <secret>" -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}' | head -c 500; echo; echo ---; curl -s -m 30 http://127.0.0.1:8080/api/mcp -H "Authorization: <secret>" -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}' > /tmp/tools.json; python3 -I -c 'import json,sys;d=json.load(open("/tmp/tools.json"));print(len(d["result"]["tools"]),"tools");print([t["name"] for t in d["result"]["tools"]][:40])' 2>&1 | head -c 1500
pkill -f "cmd/main.go" ; pkill -f "/tmp/go-build.*/main"; sleep 3; (ss -ltnp | grep -E ':8080|:6060') || echo "ports free"; pgrep -af "edgecore|go run|go-build" | grep -v pgrep || echo "no leftover procs"
(ss -ltnp | grep -E ':8080|:6060') || echo "ports free"; ps -eo pid,args | grep -E "main|go run" | grep -v grep || echo "no leftover procs"
kill 10481; sleep 3; (ss -ltnp | grep -E ':8080|:6060') || echo "ports free"; ps -eo pid,args | grep "go-build" | grep -v grep || echo "no leftover procs"
cd <host-path> && mkdir -p .coldpass && K=$(python3 -I -c 'print(open("/dev/stdin").read().strip())' <<< b673705af91be5e0e4006fa421e57c09b5fd0b43e3b0f91d3b97ab542ff6317f) && python3 -I - "$K" <<'EOF'
import json,sys
k=sys.argv[1]
probe={"kind":"mcp_http",
 "argv":["/usr/local/go/bin/go","run","cmd/main.go"],
 "cwd":"<host-path>",
 "url":"http://127.0.0.1:8080/api/mcp",
 "headers":{"Authorization":"<secret>"+k},
 "env":{"NODE_USE_ENV_PROXY":"1","PATH":"/usr/local/go/bin:/usr/local/bin:/usr/bin:/bin"}}
json.dump(probe,open(".coldpass/probe.json","w"),indent=2,ensure_ascii=False)
report={"outcome":"working",
 "operation":"Start edgeCore backend with README command `go run cmd/main.go`, then MCP initialize + tools/list over streamable HTTP at /api/mcp using a bearer key created through the product's install/login/generate-key/activate APIs. Result: 34 tools listed.",
 "operation_scope":"Read-only MCP access (mcp_full_access=false). Tool calls (reads/writes to devices and points) were not exercised. Southbound channels were not started (install mode/no devices configured). Frontend ui/dist built but not browser-tested; no CDP browser used.",
 "steps":["go mod tidy (no changes to go.mod/go.sum)",
  "cd ui && npm install && npm run build (succeeded)",
  "go run cmd/main.go (server on :8080, pprof 127.0.0.1:6060)",
  "POST /api/install/start (local admin account, bbolt storage in ./data) -> install completed",
  "POST /api/auth/login -> JWT; POST /api/mcp/generate-key; POST /api/mcp/activate {full_access:false}",
  "MCP initialize and tools/list at http://127.0.0.1:8080/api/mcp with Bearer key -> 34 tools"],
 "deviations":["Guest had no go or node: installed Go 1.26.4 from https://go.dev/dl/go1.26.4.linux-amd64.tar.gz to /usr/local/go (apt golang too old for go.mod).",
  "Installed nodejs/npm from apt: Node v18.19.1, below ui/package.json engines (^20.19 || ^22.12 || >=24). npm install warned (EBADENGINE) but build succeeded.",
  "MCP returned 401 without a key; per README the product needs an API key. Created one via the product's own install -> login -> /api/mcp/generate-key -> /api/mcp/activate flow, read-only. Key stored in probe.json headers only for this local server.",
  "Install of the product creates ./data, ./logs and ./ui/dist in the workspace (gitignored); product source unchanged.",
  "Did not run unit or lint suites."],
 "stuck_step":None,"main_blocker":None,"suggested_fix":None}
json.dump(report,open(".coldpass/report.json","w"),indent=2,ensure_ascii=False)
print("written")
EOF
ls -la .coldpass; <env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?

Start edgeCore MCP server (streamable HTTP at /api/mcp) and call MCP initialize and tools/list; returned tools such as list_channels, get_system_info, batch_create_points, create_edge_rule.

cd <host-path> && ls -la && cat README.md 2>/dev/null | head -200
cd <host-path> && ls -la .coldpass 2>/dev/null; echo "CDP=$CDP_URL $<env-var>"; which go node npm python3 make; cat /etc/os-release | head -2
cd <host-path> && cat README.en.md | head -80; echo ---; cat Makefile | head -60; echo ---; ls cmd; grep -ril "mcp" docs --include=*.md | head; cat <host-path> | head -5
cd /tmp && (curl -fsSL -m 120 https://go.dev/dl/go1.26.4.linux-amd64.tar.gz -o go.tgz && sudo tar -C /usr/local -xzf go.tgz && echo OK) 2>&1 | tail -5; /usr/local/go/bin/go version 2>&1; grep -n -i "stdio\|http\|argv\|-mcp\|flag" <host-path> | head -30; grep -rn "flag\.\(String\|Bool\)" <host-path> | head
cd <host-path> && export PATH=$PATH:/usr/local/go/bin GOFLAGS=-mod=mod NODE_USE_ENV_PROXY=1 && (go mod tidy 2>&1 | tail -5) && CGO_ENABLED=0 go build -trimpath -o dist/edgeCore ./cmd/ 2>&1 | tail -5; ls -la dist/ 2>&1; ls conf 2>&1; grep -rn "8080\|port" conf/*.yaml 2>/dev/null | head; grep -n "api/mcp" -r internal/server/*.go | head -3
cd <host-path> && ls -la go.mod go.sum && wc -c go.sum go.mod && grep -n "flag\.\|conf" cmd/main.go | head -20; ls <host-path> 2>&1
cd <host-path> && (nohup ./dist/edgeCore > /tmp/edgecore.log 2>&1 &) ; sleep 8; tail -20 /tmp/edgecore.log; (ss -ltnp 2>/dev/null || netstat -ltnp) | head -20
cd <host-path> && sed -n 55,95p internal/server/auth.go; curl -s -m 10 -X POST http://127.0.0.1:8080/api/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}' ; echo; echo rc=$?
cd <host-path> && grep -rn -i "apikey\|api_key\|ApiKey" internal/server/mcp_handler.go | head -30; grep -rln -i "mcp" internal/server/*.go | head; grep -rn "mcp" internal/server/server.go 2>/dev/null | grep -i "Post\|Get\|Put\|Group" | head
cd <host-path> && grep -n "func (s \*Server) handleMcpGenerateKey\|func (s \*Server) handleMcpActivate\|func (s \*Server) handleMcpGetKey" -A25 internal/server/*.go | head -120; sed -n 480,500p internal/server/server.go
cd <host-path> && grep -n "login\|Login\|setup\|install" internal/server/server.go | head -20; sed -n 95,120p internal/server/auth.go
cd <host-path> && grep -n "func (s \*Server) loadAiCopilotSettings\|func (s \*Server) saveAiCopilotSettings" -A15 internal/server/*.go | head -50; grep -n "api.Use\|JWTAuth()" internal/server/server.go | head
cd <host-path> && grep -n "func (s \*Server) handleLogin" -A30 internal/server/*.go | head -45; grep -rn -i "default.*password\|admin.*password\|\"admin\"" internal/ --include=*.go | grep -v _test | head
cd <host-path> && grep -n "type.*Request\|json:\"" internal/server/install_handler.go | head -60; grep -n "type LoginRequest" -A12 internal/server/auth.go; sed -n 350,372p internal/server/auth.go
cd <host-path> && sed -n 380,420p internal/server/install_handler.go; grep -n "func (s \*Server) startInstall" -A20 internal/server/install_handler.go | head -30; curl -s -m5 http://127.0.0.1:8080/api/install/status; echo
cd <host-path> && grep -rn "type InstallConfig" -A25 internal/model/ | head -35; grep -n "func validateInstallConfig" -A25 internal/server/install_handler.go | head -35
cd <host-path> && PW=$(python3 -c 'import secrets;print(secrets.token_urlsafe(16))') && curl -s -m 20 -X POST http://127.0.0.1:8080/api/install/start -H 'Content-Type: application/json' -d "{\"port\":8080,\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"storagePath\":\"/tmp/edgecore-data\",\"storageBackend\":\"bbolt\",\"gatewayName\":\"smoke-gw\",\"gatewayLocation\":\"lab\",\"deviceSerial\":\"smoke-0001\"}"; echo; sleep 10; curl -s -m5 http://127.0.0.1:8080/api/install/install-status | head -c 1500; echo; curl -s -m5 http://127.0.0.1:8080/api/install/status
cd <host-path> && grep -n "nonce\|Nonce" internal/server/server.go | head -5; grep -n "auth :<secret>" internal/server/server.go | head -3; grep -n "DebugMode *=" -r internal/server/*.go | head -3; grep -n "func.*handleNonce\|func.*GetNonce" -A3 internal/server/auth.go | head
cd <host-path> && sed -n 287,307p internal/server/auth.go; grep -n "AuthenticateLDAP\|user, found\|found = true" internal/server/auth.go | head -5; sed -n 340,349p internal/server/auth.go; sed -n 372,400p internal/server/auth.go | grep -n "Token\|token\|data\|code" | head
cd <host-path> && pkill -f dist/edgeCore; sleep 3; rm -rf /tmp/edgecore-data; ls data 2>/dev/null; (nohup ./dist/edgeCore > /tmp/edgecore.log 2>&1 &); sleep 6; PW=$(python3 -c 'import secrets;print(secrets.token_urlsafe(16))'); umask 077; echo "$PW" > /tmp/smoke-admin-pw.txt; curl -s -m 20 -X POST http://127.0.0.1:8080/api/install/start -H 'Content-Type: application/json' -d "{\"port\":8080,\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"storagePath\":\"/tmp/edgecore-data\",\"storageBackend\":\"bbolt\",\"gatewayName\":\"smoke-gw\",\"gatewayLocation\":\"lab\",\"deviceSerial\":\"smoke-0001\"}"; echo; sleep 8; curl -s -m5 http://127.0.0.1:8080/api/install/status; echo; N=$(curl -s http://127.0.0.1:8080/api/auth/nonce | python3 -c 'import sys,json;print(json.load(sys.stdin)["data"]["nonce"])'); H=$(python3 -c "import hashlib,sys;print(hashlib.sha256((sys.argv[1]+sys.argv[2]).encode()).hexdigest())" "$PW" "$N"); curl -s -m5 -X POST http://127.0.0.1:8080/api/auth/login -H 'Content-Type: application/json' -d "{\"loginFlag\":true,\"loginType\":\"local\",\"data\":{\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"nonce\":\"$N\"}}" | head -c 300
pgrep -af edgeCore; ls /tmp/smoke-admin-pw.txt 2>&1; ls /tmp/edgecore-data 2>&1 | head
cd <host-path> && (nohup ./dist/edgeCore > /tmp/edgecore.log 2>&1 &); sleep 6; PW=$(python3 -c 'import secrets;print(secrets.token_urlsafe(16))'); umask 077; echo "$PW" > /tmp/smoke-admin-pw.txt; curl -s -m 20 -X POST http://127.0.0.1:8080/api/install/start -H 'Content-Type: application/json' -d "{\"port\":8080,\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"storagePath\":\"/tmp/edgecore-data\",\"storageBackend\":\"bbolt\",\"gatewayName\":\"smoke-gw\",\"gatewayLocation\":\"lab\",\"deviceSerial\":\"smoke-0001\"}"; echo; sleep 8; curl -s -m5 http://127.0.0.1:8080/api/install/status; echo; N=$(curl -s http://127.0.0.1:8080/api/auth/nonce | python3 -c 'import sys,json;print(json.load(sys.stdin)["data"]["nonce"])'); H=$(python3 -c "import hashlib,sys;print(hashlib.sha256((sys.argv[1]+sys.argv[2]).encode()).hexdigest())" "$PW" "$N"); curl -s -m5 -X POST http://127.0.0.1:8080/api/auth/login -H 'Content-Type: application/json' -d "{\"loginFlag\":true,\"loginType\":\"local\",\"data\":{\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"nonce\":\"$N\"}}" | head -c 300
cd <host-path> && PW=$(cat /tmp/smoke-admin-pw.txt); N=$(curl -s http://127.0.0.1:8080/api/auth/nonce | python3 -c 'import sys,json;print(json.load(sys.stdin)["data"]["nonce"])'); H=$(python3 -c "import hashlib,sys;print(hashlib.sha256((sys.argv[1]+sys.argv[2]).encode()).hexdigest())" "$PW" "$N"); TOK=$(curl -s -m5 -X POST http://127.0.0.1:8080/api/auth/login -H 'Content-Type: application/json' -d "{\"loginFlag\":true,\"loginType\":\"local\",\"data\":{\"username\":\"smoke-admin\",\"password\":\"<secret>\",\"nonce\":\"$N\"}}" | python3 -c 'import sys,json;print(json.load(sys.stdin)["data"]["token"])'); umask 077; MK=$(python3 -c 'import secrets;print(secrets.token_hex(32))'); echo "$MK" > /tmp/mcp-key.txt; curl -s -m10 -X POST http://127.0.0.1:8080/api/mcp/activate -H "token: <secret>" -H "Authorization: <secret>" -H 'Content-Type: application/json' -d "{\"full_access\":false,\"api_key\":\"<secret>\"}"; echo; curl -s -m10 -X POST http://127.0.0.1:8080/api/mcp -H "Authorization: <secret>" -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}'; echo; curl -s -m10 -X POST http://127.0.0.1:8080/api/mcp -H "Authorization: <secret>" -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}' | head -c 1500
cd <host-path> && grep -n "dataDir\s*:\?=" cmd/main.go | head -5; grep -rn "StoragePath" internal/server/install_handler.go | head -5; ls -la /tmp/edgecore-data data 2>&1 | head
cd <host-path> && for p in $(pgrep -x edgeCore); do kill $p; done; sleep 3; pgrep -x edgeCore || echo "no edgeCore running"; cat .gitignore | grep -n "data\|dist" ; mkdir -p .coldpass && KEY=$(cat /tmp/mcp-key.txt) && python3 - "$KEY" <<'EOF'
import json,sys
key=sys.argv[1]
probe={"kind":"mcp_http","argv":["<host-path>","headers":{"Authorization":"<secret>"+key},"env":{}}
json.dump(probe,open("<host-path>","w"),indent=2,ensure_ascii=False)
EOF
cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "operation": "Start edgeCore MCP server (streamable HTTP at /api/mcp) and call MCP initialize and tools/list; returned tools such as list_channels, get_system_info, batch_create_points, create_edge_rule.",
  "operation_scope": "Verified locally on 127.0.0.1:8080 with a locally created MCP API key. Read-only tools exercised only at tools/list level; no device/channel data present on a fresh install. Browser (CDP) not needed and not used.",
  "steps": [
    "apt/curl: downloaded go1.26.4 linux-amd64 to /usr/local/go (go.mod requires go 1.26.4)",
    "go mod tidy (README Quick Start backend step; go.mod/go.sum unchanged)",
    "CGO_ENABLED=0 go build -trimpath -o dist/edgeCore ./cmd/ (Makefile build target; equivalent to README go run cmd/main.go)",
    "./dist/edgeCore (default -conf ./conf not present; product started in install mode on :8080)",
    "POST /api/install/start with local admin account (install wizard API), then POST /api/auth/login via nonce",
    "POST /api/mcp/activate with a generated 64-hex API key (key stored at /tmp/mcp-key.txt, copied into probe headers)",
    "MCP initialize and tools/list against POST /api/mcp with Bearer key: HTTP 200, tools returned",
    "stopped the test edgeCore process (pid kill) before finishing"
  ],
  "deviations": [
    "README 'go run cmd/main.go' not used directly; built binary with the Makefile build target so the checker can start a stable argv.",
    "Node/npm frontend step (cd ui && npm install && npm run build) NOT run: it is not needed for the MCP operation and was skipped as out of scope for this smoke task.",
    "MCP requires an API key set through the product's JWT-protected UI flow; the install wizard was run via its API to create a local admin, then the key was activated via /api/mcp/activate. The admin password is at /tmp/smoke-admin-pw.txt in the guest.",
    "Product created runtime state in workspace/data/ (config.db, runtime.db, storage.meta) and dist/edgeCore; both are build/runtime outputs, not source changes.",
    "DNS proxy failed to bind :53 (permission denied) as a non-fatal warning; mDNS started. Not relevant to MCP."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "suggested_fix": null
}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?

[
  {
    "status": "PASS",
    "details": {
      "working": false,
      "argv": [
        "go",
        "version"
      ],
      "kind": "cli",
      "returncode": 0,
      "stdout": "go version go1.26.4 linux/amd64",
      "stderr": "",
      "needs_credentials": false,
      "needs_browser": false,
      "scope": "partial: install"
    },
    "check": "install",
    "optional": false
  },
  {
    "status": "PASS",
    "details": {
      "working": false,
      "argv": [
        "go",
        "run",
        "cmd/main.go"
      ],
      "kind": "http",
      "status": 200,
      "bytes": 46,
      "url": "http://127.0.0.1:8080/api/mcp",
      "scope": "partial: start"
    },
    "check": "start",
    "optional": false
  },
  {
    "status": "FAIL",
    "details": {
      "working": false,
      "kind": "mcp_http",
      "url": "http://127.0.0.1:8080/api/mcp",
      "hosting": "remote",
      "transport": "streamable-http",
      "scope": "remote hosted MCP initialize + tools/list",
      "blocker": "hosted MCP probe requires an HTTPS endpoint without embedded credentials or a fragment"
    },
    "check": "credentials_error",
    "optional": false
  }
]

Started the edgeCore backend (README Quick Start: go run cmd/main.go) and sent MCP tools/list to the documented /api/mcp endpoint without credentials; server returned 401 with the message asking for an API key set in the UI.

apt-get install -y golang-go git (Go toolchain; go.mod requires go 1.26.4, auto-downloaded by Go toolchain)
go mod tidy (README Quick Start, backend)
go build -o /tmp/edgecore ./cmd/
/tmp/edgecore started (equivalent of go run cmd/main.go); listening on :8080 (web/MCP) and 127.0.0.1:6060 (pprof)
curl POST http://127.0.0.1:8080/api/mcp tools/list without key -> HTTP 401 JSON-RPC error -32001
Stopped the server (pkill) so the checker can bind the port

[
  {
    "status": "FAIL",
    "details": {
      "working": false,
      "argv": [
        "/usr/local/go/bin/go",
        "build",
        "-o",
        "/tmp/edgecore-bin",
        "./cmd"
      ],
      "kind": "cli",
      "returncode": 0,
      "stdout": "",
      "stderr": "",
      "needs_credentials": false,
      "needs_browser": false,
      "blocker": "product invocation failed: {\"returncode\": 0, \"stdout\": \"\", \"stderr\": \"\", \"needs_credentials\": false, \"needs_browser\": false}"
    },
    "check": "install",
    "optional": false
  },
  {
    "status": "FAIL",
    "details": {
      "working": false,
      "argv": [
        "/tmp/edgecore-bin"
      ],
      "kind": "http",
      "blocker": "HTTP server exited: 2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:69\tStarting Industrial Edge Gateway...\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:81\tDatabase check\t{\"backend\": \"bbolt\", \"config_exists\": false}\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:118\tconfig.db not found, starting with default empty config (install mode)\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:122\tDefault config loaded for installation\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:130\tLogger initialized\t{\"level\": \"info\", \"file\": \"logs/gateway.edgeCore.log\"}\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:131\tBuild info\t{\"version\": \"dev\", \"build_time\": \"unknown\", \"commit_id\": \"unknown\"}\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:137\tData directory ready\t{\"path\": \"data\"}\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:148\tInitializing data pipeline...\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:150\tData pipeline initialized\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:159\tInitializing Edge Compute Manager...\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:167\tEdge Compute Manager started\n2026-10-17T12:17:07.871Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:170\tInitializing Channel Manager...\n2026-10-17T12:17:07.872Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:202\tInitializing Northbound Manager...\n2026-10-17T12:17:07.872Z\t\u001b[34mINFO\u001b[0m\tnetwork/mdns_server.go:195\tmDNS services started for hostname: edgeCore ([192.0.2.2])\n2026-10-17T12:17:07.872Z\t\u001b[34mINFO\u001b[0m\tnetwork/dns_proxy.go:124\tDNS proxy unavailable for hostname edgeCore: listen udp :53: bind: address already in use\nError starting DNS proxy: listen udp :53: bind: address already in use\n2026-10-17T12:17:07.872Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:250\tCore components initialized\n2026-10-17T12:17:07.872Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:253\tInitializing Web Server...\n2026-10-17T12:17:07.873Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:303\tWeb Server initialized\n2026-10-17T12:17:07.873Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:373\tSkipping channel and northbound startup (install mode)\n2026-10-17T12:17:07.882Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:48\tpprof server starting\t{\"addr\": \"127.0.0.1:6060\"}\n2026-10-17T12:17:07.883Z\t\u001b[33mWARN\u001b[0m\tcmd/main.go:50\tpprof server failed\t{\"addr\": \"127.0.0.1:6060\", \"error\": \"listen tcp 127.0.0.1:6060: bind: address already in use\"}\n2026-10-17T12:17:07.883Z\t\u001b[34mINFO\u001b[0m\tcmd/main.go:362\tWeb server starting\t{\"addr\": \":8080\"}\n2026-10-17T12:17:07.883Z\t\u001b[31mFATAL\u001b[0m\tcmd/main.go:364\tWeb server failed\t{\"error\": \"failed to listen: listen tcp4 :8080: bind: address already in use\"}\n"
    },
    "check": "start",
    "optional": false
  },
  {
    "status": "FAIL",
    "details": {
      "working": false,
      "kind": "mcp_http",
      "url": "http://127.0.0.1:8080/api/mcp",
      "hosting": "remote",
      "transport": "streamable-http",
      "scope": "remote hosted MCP initialize + tools/list",
      "blocker": "hosted MCP probe requires an HTTPS endpoint without embedded credentials or a fragment"
    },
    "check": "credentials_error",
    "optional": false
  }
]

Start edgeCore backend (README Quick Start: go run cmd/main.go, built as a binary) and send MCP initialize/tools/list to POST /api/mcp

Read README.md / README.en.md Quick Start
Installed Go 1.26.4 from https://go.dev/dl/go1.26.4.linux-amd64.tar.gz to /usr/local/go (apt golang-go is 1.22; go.mod requires 1.26.4)
cd /workspace && go mod download
cd /workspace && go build -o /tmp/edgecore-bin ./cmd (succeeded)
cd /tmp/edgerun && /tmp/edgecore-bin (listening on 0.0.0.0:8080, pprof 127.0.0.1:6060; DNS proxy on :53 already in use, non-fatal)
POST http://127.0.0.1:8080/api/mcp initialize and tools/list returned HTTP 401, error code -32001 (API key required)