MUSTer_MCP
by Cosmostima
Overview
The MUSTer MCP server enables LLMs to interact with the M.U.S.T. (Macau University of Science and Technology) campus systems, Moodle and Wemust, to automate tasks such as fetching class schedules, querying course content, viewing deadlines, downloading resources, and opening authorized web pages.
Installation
uv run main.pyEnvironment Variables
- MUSTER_USERNAME
- MUSTER_PASSWORD
- MUSTER_DOWNLOAD_PATH
- MOODLE_URL
- SCHEDULE_URL
Security Notes
CRITICAL RISK: The `download_resource` tool allows specifying an arbitrary `download_path` as a string argument. An LLM, if compromised or jailbroken, could specify sensitive system directories (e.g., `/etc`, `/usr/bin`, `/root`) leading to arbitrary file writes and potential system compromise. This is a severe vulnerability. Additionally, the `open_URL_with_authorization` tool explicitly launches a *headed* Chrome browser window on the machine running the MCP server, which can expose browser activity to anyone with physical or remote access to that machine, posing a privacy and security risk in shared environments.
Similar Servers
playwright-mcp
A Model Context Protocol (MCP) server enabling LLMs to automate browser interactions through structured accessibility snapshots, bypassing traditional vision models.
mcp-server-browserbase
Provides cloud browser automation capabilities, enabling LLMs to interact with web pages, take screenshots, extract information, and perform automated actions.
mcp
This server provides Hyperbrowser's Model Context Protocol (MCP) interface, offering tools for web scraping, structured data extraction, crawling, and general-purpose browser automation using AI agents like OpenAI's CUA and Anthropic's Claude Computer Use.
agentic-browser
This server powers a model-agnostic browser extension designed for intelligent, adaptive web automation and interaction through LLM-driven action plans, supporting various external APIs for specialized tasks.