Back to Home
GUESTVALENCIA icon

mcp-enterprise-server

by GUESTVALENCIA

Overview

A multimodal AI platform integrating Qwen3 models for enterprise-level system interaction, real-time multimedia generation, and communication capabilities.

Installation

Run Command
npm start

Environment Variables

  • PORT
  • GROQ_API_KEY
  • CARTESIA_API_KEY
  • DEEPGRAM_API_KEY
  • TWILIO_ACCOUNT_SID
  • TWILIO_AUTH_TOKEN
  • TWILIO_PHONE_NUMBER
  • RENDER_API_KEY
  • CARTESIA_VOICE_ID
  • BRIGHTDATA_PROXY

Security Notes

CRITICAL: The server is highly vulnerable to command injection and path traversal. The `child_process.exec` function is used directly with unsanitized user input (`req.body.command`) in the `/mcp/command/execute` endpoint and within the `execute_command` Qwen tool. Similarly, `fs.readFile` directly uses unsanitized user input (`req.body.path`, `req.body.uri`) in `/mcp/resources/read` and the `read_file` Qwen tool. These vulnerabilities allow remote code execution and arbitrary file access on the host system. Furthermore, the `RENDER_API_KEY` is hardcoded as a fallback in the Render API client services, and a 'mcp-secret' authentication header ('sandra_enterprise_2025') is hardcoded in test files and used for authentication, making it publicly exposed and trivial to bypass.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassMedium
Avg Tokens1000
Stars0
Forks0
Last Update2025-12-14

Tags

Multimodal AIEnterprise ServerQwen3Real-time CommunicationAgentic Capabilities