catalog

The repository primarily consists of manifest files that define how to run various MCP servers. Many of these definitions specify `STDIO` transport, instructing the client to execute external commands or packages (e.g., `npx`, `docker`, `uvx`) on the host machine. This design paradigm inherently introduces significant security risks, as executing arbitrary external code (even if from a known package registry) can lead to supply chain attacks, arbitrary code execution, and privilege escalation if the source or the execution environment is not rigorously sandboxed and audited. While the catalog itself is static, the instructions it provides empower clients to run potentially untrusted code. Several manifests also declare API keys as required environment variables, which necessitates careful handling by end-users to prevent exposure.