Back to Home
DollhouseMCP icon

mcp-server

Verified Safe

by DollhouseMCP

Overview

Manages AI customization and persistent context through modular, reusable elements (Personas, Skills, Agents, Templates, Memories).

Installation

Run Command
npx @dollhousemcp/mcp-server

Environment Variables

  • DOLLHOUSE_USER
  • DOLLHOUSE_EMAIL
  • DOLLHOUSE_PORTFOLIO_DIR
  • DOLLHOUSE_TELEMETRY
  • GITHUB_TOKEN
  • DOLLHOUSE_GITHUB_CLIENT_ID
  • DOLLHOUSE_AUTO_SUBMIT_TO_COLLECTION
  • DOLLHOUSE_DISABLE_AUTOLOAD
  • DOLLHOUSE_VERBOSE_LOGGING
  • DOLLHOUSE_LOG_TIMING

Security Notes

The project demonstrates exceptional security practices with comprehensive input validation (sanitization, Unicode normalization, explicit type checks), robust protection against YAML injection (SecureYamlParser with FAILSAFE_SCHEMA), path traversal, and ReDoS attacks (SafeRegex library with timeouts). It implements memory limits to prevent DoS, enforces content trust levels (especially for AI-generated memories), and maintains extensive audit logs via SecurityMonitor. Hardcoded secrets were not found, and network requests are directed to trusted domains. The codebase explicitly references and resolves numerous security fixes (e.g., PR #319, #1187, #1269, #1314, #1400) and security audits, indicating a proactive and mature approach to security.

Similar Servers

Stats

Interest Score39
Security Score9
Cost ClassMedium
Avg Tokens750
Stars25
Forks8
Last Update2026-01-07

Tags

AIcustomizationsecurityGitHubcontext