language-server-mcp
by alexwohletz
Overview
Provides language support features like hover information, code completion, and diagnostics for code editing through the Model Context Protocol (MCP).
Installation
node /path/to/language-server-mcp/build/index.jsEnvironment Variables
- TYPESCRIPT_SERVER
Security Notes
The server dynamically spawns external language server processes based on configurations read from environment variables (e.g., `process.env.TYPESCRIPT_SERVER`). If an attacker can control these environment variables, they could inject arbitrary shell commands to be executed by the `child_process.spawn` call, leading to remote code execution. While the README implies user configuration for local development, in an automated or untrusted AI agent context, this presents a significant command injection vulnerability. Uses of `eval` found in coverage report utility files are not part of the core server's runtime logic.
Similar Servers
mcp-language-server
Proxies a Language Server Protocol (LSP) server to provide semantic code intelligence tools to Model Context Protocol (MCP) clients, enabling LLMs to interact with codebases.
cclsp
MCP server to integrate LLM-based coding agents with Language Server Protocol (LSP) servers for robust symbol resolution and code navigation.
mcp-typescript-template
This server acts as a template for building remote Model Context Protocol (MCP) servers using TypeScript, handling MCP tool registration and session management over HTTP.
mcp
This SDK provides client and server implementations for the Model Context Protocol (MCP), enabling communication between AI agents/LLMs and external services like tools, prompts, and resources via JSON-RPC over HTTP/SSE.