ollama-fastmcp-wrapper

The wrapper's FastAPI instance binds to '0.0.0.0:8000' by default, making it accessible from any network interface, which could be a security risk if exposed to the public internet without proper firewall rules or access control. FastMCP servers configured with 'STDIO' transport use `subprocess.run` to execute commands (e.g., `uv run --with fastmcp ...`). While the default commands provided are safe, this mechanism could be exploited via configuration file manipulation to achieve remote code execution if the configuration file is writable by an attacker. LLM-driven tool calls, where `tool_name` and `arguments` are derived from the model's output, could potentially be used for arbitrary tool execution or data manipulation if the LLM hallucinates malicious inputs and server-side validation/sanitization is insufficient. The project appropriately uses `.toml` files for API tokens, which are designed to be git-ignored, preventing hardcoded secrets.