mcp-fantastical

The server uses `child_process.exec` to run `osascript` commands and `open` URL schemes. This interaction with local applications requires granting 'Accessibility permissions' to the terminal or Claude Desktop, which inherently provides the executing process with significant control over other applications. While the current implementation attempts to sanitize user inputs for URL schemes using `encodeURIComponent` and `URLSearchParams`, and uses mostly static AppleScripts for reading calendar data, a vulnerability could arise if untrusted input is improperly handled in future additions or if the server itself is compromised. The explicit requirement for high-level permissions on macOS makes this a higher-risk tool compared to isolated web services.