Back to Home
ForceInjection icon

mcp-reference

by ForceInjection

Overview

A reference processing tool for Markdown documents, providing automated reference extraction, citation renumbering, bibliography generation, and related literature recommendation functions, integrated via Model Context Protocol (MCP) into Trae IDE.

Installation

Run Command
bash -lc "cd mcp-reference && PYTHONPATH=. LOG_LEVEL=INFO uv run --python 3.12 --with fastmcp==2.0.0 --with fastapi==0.115.12 --with uvicorn==0.32.0 --with pydantic==2.9.0 --with markdown-it-py==3.0.0 --with mdit-py-plugins==0.4.0 fastmcp run app/mcp_server.py"

Environment Variables

  • LOG_LEVEL

Security Notes

The server exposes endpoints (`/api/v1/extract/references`, `/api/v1/extract/citations`, etc.) that accept a `file_path` parameter. This path is directly used by `app/services/markdown_parser.py`'s `read_markdown` function via `open()`, which makes the server vulnerable to arbitrary file read (path traversal) if not properly isolated or if input paths are not sanitized. The `/api/v1/system/stop` endpoint allows unauthenticated shutdown, which can disrupt service, though this is less critical than the file read vulnerability. It also uses `os._exit(0)` for an ungraceful shutdown.

Similar Servers

Stats

Interest Score34
Security Score5
Cost ClassMedium
Avg Tokens10000
Stars1
Forks0
Last Update2025-11-24

Tags

Reference ManagementMarkdown ProcessingMCP ServerFastAPIText Analysis