d2l-mcp-server
Verified Safeby General-Mudkip
Overview
Provides AI assistants with tools to interact with D2L Brightspace LMS for managing academic activities.
Installation
d2l-mcpEnvironment Variables
- D2L_HOST
- D2L_COURSE_ID
Security Notes
The server uses Playwright to manage persistent browser sessions, saving sensitive session data (cookies, local storage) to '~/.d2l-session/'. A compromise of the local machine could lead to session hijacking. The 'download_file' tool allows specifying a 'savePath', which, if controlled by a malicious or poorly designed agent, could potentially lead to arbitrary file writes on the local filesystem. However, direct external arbitrary input is unlikely to control this path as it's passed from the agent. No direct 'eval' or obvious remote code execution vulnerabilities were found.
Similar Servers
playwright-mcp
Provides a Model Context Protocol (MCP) server for LLMs to automate browser interactions using Playwright's accessibility tree, avoiding pixel-based vision models.
mcp-omnisearch
Provides a unified interface for various search, AI response, content processing, and enhancement tools via Model Context Protocol (MCP).
livewire-flux-mcp
This MCP server provides AI assistants with structured access to Livewire Flux component, layout, and icon documentation through web scraping.
lyra-tool-discovery
This MCP server is designed to fetch, parse, and organize documentation from websites implementing the llms.txt standard. It transforms raw documentation into structured, agent-ready formats, exposing tools for AI agents, LLMs, and automation workflows to consume documentation programmatically.