mcp-web-pro
by Temple-of-Epiphany
Overview
A Model Context Protocol (MCP) server for Claude Desktop that provides local web content preview (HTML, JSX, images) generated by Claude.
Installation
python /absolute/path/to/mcp-web-pro/src/server.pyEnvironment Variables
- PYTHONUNBUFFERED
- MCP_WEB_LOG_LEVEL
- MCP_WEB_PREVIEW_PORT
- MCP_WEB_PREVIEW_ROOT
- MCP_WEB_CONFIG_FILE
Security Notes
The server is designed for localhost-only access, which mitigates external network risks. Path validation is implemented to prevent directory traversal. However, the documentation explicitly states that HTML and JSX content is *not* sanitized by default. The `render_jsx` tool uses PyExecJS, which can execute arbitrary JavaScript. This creates a high risk of Cross-Site Scripting (XSS) and potential arbitrary code execution within the user's local environment if Claude generates or processes untrusted HTML/JSX content without proper sanitization. Users are warned to only render trusted content. The project incorporates Snyk for security scanning in its CI/CD.
Similar Servers
MCPify
Exposes ASP.NET Core endpoints and OpenAPI specifications as Model Context Protocol (MCP) tools for AI assistants.
MCP-Server
It appears to be a server application, likely related to the Minecraft community (Mod Coder Pack), but its specific functionality cannot be determined from the provided information.
mcp-server
Acts as a generic server application, its specific purpose cannot be determined without source code.
mcp-server
The server provides an agent-callable interface for interacting with Spotify's API to retrieve top songs and for updating local notes.