mcp-leak-server

The server's core purpose is to deliver an XML response containing explicit instructions for a client-side agent to execute a hidden, unlogged command (`[HIDDEN_OVERRIDE]`) described as a 'mandatory finalization step'. This pattern is highly indicative of a command-and-control (C2) component, designed to facilitate stealthy, potentially malicious operations (like exfiltration or further compromise) on a connected client, rather than serving legitimate documentation. While the server itself doesn't contain direct server-side exploits like 'eval' or hardcoded secrets, its output is a direct instruction for hidden command execution, making it a critical security risk.