MSFS-MCP-Server

The server exposes powerful SimConnect control methods (e.g., `set_event_state`, `fire_event`) via an HTTP/SSE API (FastAPI + FastMCP). When exposed publicly via `ngrok` (as explicitly suggested for remote control), this creates a significant attack surface. A compromised LLM client or an attacker gaining access to the ngrok URL could issue arbitrary commands to the local MSFS instance. While the direct code does not contain obvious malicious patterns like `eval` or hardcoded secrets, the fundamental design grants high-level control to external entities, which is inherently risky when unauthenticated and publicly accessible. The project disclaimer explicitly warns about risks like LLM rate-limiting leading to uncontrolled flight.