mcp-terminal

The server's core functionality involves executing arbitrary shell commands via a pseudo-terminal (PTY) using `terminado`. While this is its intended purpose, it means exposing the server without robust authentication and authorization is highly dangerous, as any connected client can execute commands on the host system. The default FastAPI CORS configuration `allow_origins=["*"]` is also a security risk for production environments and should be restricted to specific origins. No obvious direct command injection vulnerabilities were found outside of the inherent PTY functionality itself. The custom `_decode_escape_sequences` function adds a layer of input parsing, which could theoretically be a surface for subtle flaws if not rigorously tested, but it appears designed for safe character interpretation.