yaml2mcp
Verified Safeby adefemi171
Overview
Manage Model Context Protocol (MCP) servers using YAML configuration files within VS Code, automatically transpiling to JSON for IDE compatibility.
Installation
No command providedSecurity Notes
The extension's core functionality involves executing user-defined commands from the `mcp.yaml` file via `child_process.spawn`. This design inherently allows for arbitrary code execution if the `mcp.yaml` file is maliciously crafted or untrusted. However, for a developer tool that explicitly aims to manage and run local processes, this is an expected and necessary feature, not a vulnerability in the extension's code itself. There are no indications of direct `eval`, obfuscation, hardcoded secrets, or unintended network risks in the provided source code. The security posture relies on the user trusting their own configuration files.
Similar Servers
charlie
A universal command-line interface (CLI) and Python library that generates agent-specific configurations (commands, rules, MCP servers) for various AI agents from a single YAML or Markdown specification, supporting configuration inheritance and variable templating.
mcp-devcontainers
Provides a Model Context Protocol (MCP) server for integrating with and managing devcontainer environments via the devcontainers CLI.
shell-exec-mcp
Provides a Model Context Protocol (MCP) server for executing arbitrary bash commands, supporting both foreground execution with timeouts and background job management.
vscode-refactor-mcp
A VSCode extension hosting an IPC server to enable external MCP (Model Context Protocol) servers to proxy VSCode API calls for refactoring and code manipulation.