papilio_mcp_server

The server itself runs locally via stdio and does not expose network ports or use dangerous host-side execution functions like `eval` or `os.system` with arbitrary user input. Input validation is present for most tool arguments. However, it's designed to provide powerful, low-level access to the connected FPGA (Wishbone R/W, JTAG control, raw serial commands). If the host machine running the server is compromised, or an untrusted AI assistant gains control, it could issue commands that alter the FPGA's state, enabling deep hardware debugging but also potential misuse of the attached hardware. The `send_raw_command` tool allows direct transmission of arbitrary commands to the serial port, relying entirely on the robustness of the Arduino firmware's parser. For a debugging tool, this level of access is expected, but users should be aware of the implications.