csharp-mcp

The core function of this server is to execute arbitrary C# scripts provided by the user or an AI assistant. This inherently carries significant security risks, as untrusted code can potentially access sensitive files, make network requests, or exploit system vulnerabilities. Mitigations include: - Console output capture. - Configurable script execution timeout. - File access can be restricted via the `CSX_ALLOWED_PATH` environment variable, but this feature is explicitly **disabled inside Docker containers**, relying solely on Docker's volume mounting for isolation. Users must configure Docker mounts very carefully to restrict script access. - Docker containers run as a non-root user. - Only .csx files are allowed for execution. Despite these mitigations, running untrusted C# code is extremely dangerous. This server should only be used with thoroughly vetted scripts from trusted sources, and in isolated environments (e.g., dedicated Docker containers with minimal volume mounts).