anytype-mcp
by anyproto
Overview
The Anytype MCP Server enables AI assistants to interact with Anytype's API through natural language by converting its OpenAPI specification into MCP tools.
Installation
npx -y @anyproto/anytype-mcpEnvironment Variables
- OPENAPI_MCP_HEADERS
Security Notes
The server loads an OpenAPI specification from a URL or local file, which is then parsed to create MCP tools. A critical vulnerability exists in the `HttpClient`'s file upload handling: it uses `fs.createReadStream` with file paths directly derived from AI-provided arguments. This allows an AI (or a malicious user interacting through the AI) to potentially read arbitrary files from the server's filesystem, posing a significant local file inclusion/arbitrary file read risk. While an `eval` statement was found, it is currently commented out, mitigating that specific severe risk.
Similar Servers
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.
mcp-openapi-server
A Model Context Protocol (MCP) server that exposes OpenAPI endpoints as MCP tools, along with optional support for MCP prompts and resources, enabling Large Language Models to interact with REST APIs.
zeromcp
A minimal, pure Python Model Context Protocol (MCP) server for exposing tools, resources, and prompts via HTTP/SSE and Stdio transports.
modular-mcp
A proxy server that efficiently manages and loads large tool collections from multiple Model Context Protocol (MCP) servers on-demand for LLMs, reducing context overhead.