MCP-Plugin-dotnet

The server uses a bridge architecture with SignalR for real-time, bidirectional communication and dynamic method invocation (ReflectorNet) to expose C# methods to AI clients. While powerful, this design introduces security risks, particularly if the bridge server is exposed over HTTP to untrusted networks without explicit authentication and authorization. The safety heavily depends on what methods the application developer chooses to expose using `[McpPluginTool]` attributes; exposing sensitive operations (e.g., file system access, shell commands) without careful validation can lead to severe vulnerabilities. The provided code snippets and documentation do not detail authentication/authorization mechanisms for the SignalR hub or the MCP bridge itself.