Back to Home
Temple-of-Epiphany icon

mcp-web-pro

by Temple-of-Epiphany

Overview

A Model Context Protocol (MCP) server for Claude Desktop that provides local web content preview (HTML, JSX, images) generated by Claude.

Installation

Run Command
python /absolute/path/to/mcp-web-pro/src/server.py

Environment Variables

  • PYTHONUNBUFFERED
  • MCP_WEB_LOG_LEVEL
  • MCP_WEB_PREVIEW_PORT
  • MCP_WEB_PREVIEW_ROOT
  • MCP_WEB_CONFIG_FILE

Security Notes

The server is designed for localhost-only access, which mitigates external network risks. Path validation is implemented to prevent directory traversal. However, the documentation explicitly states that HTML and JSX content is *not* sanitized by default. The `render_jsx` tool uses PyExecJS, which can execute arbitrary JavaScript. This creates a high risk of Cross-Site Scripting (XSS) and potential arbitrary code execution within the user's local environment if Claude generates or processes untrusted HTML/JSX content without proper sanitization. Users are warned to only render trusted content. The project incorporates Snyk for security scanning in its CI/CD.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassLow
Stars0
Forks0
Last Update2025-11-27

Tags

Web RenderingLocal PreviewClaude IntegrationDevelopment Tool