export type Severity = 'high' | 'medium' | 'low' | 'info';
export interface Finding {
    id: string;
    severity: Severity;
    title: string;
    detail: string;
}
export interface ScanReport {
    dir: string;
    mcpEnabled: boolean;
    findings: Finding[];
    /** Highest severity present, or 'info' when clean. */
    worst: Severity;
}
/**
 * Scan a harness directory for MCP security issues. Never executes anything —
 * static inspection of policy + config + manifest files only.
 */
export declare function scanMcp(dir: string): ScanReport;
/** CLI wrapper. Exit code 1 if any HIGH finding, else 0. */
export declare function mcpScanCmd(args: string[]): {
    code: number;
    lines: string[];
};
//# sourceMappingURL=mcp-scan.d.ts.map