mcpclient

The `public_html/api.php` endpoint exposes all configured MCP servers and their tools via an unauthenticated web API. Any HTTP request to this endpoint can initialize connections, list tools, and call tools on any configured backend server. This presents a critical security vulnerability, allowing potential remote code execution or unauthorized access if the MCP servers themselves are not secured and/or expose dangerous tools. No authorization, authentication, or input validation beyond basic type parsing is implemented for the web API, making it unsafe for public exposure. The `proc_open` usage for 'process' connections is somewhat mitigated by `escapeshellarg` but relies on trusting the local `mcpconfig.json`.