Back to Home
blacktop icon

mcp-tts

Verified Safe

by blacktop

Overview

Provides a Text-to-Speech (TTS) server using the Model Context Protocol (MCP) to integrate various TTS engines into applications like Claude Desktop and Cursor IDE.

Installation

Run Command
go run main.go

Environment Variables

  • OPENAI_API_KEY
  • ELEVENLABS_API_KEY
  • GOOGLE_AI_API_KEY
  • GEMINI_API_KEY

Security Notes

The project includes a comprehensive `SECURITY_REVIEW.md` detailing identified critical and high-priority issues (memory leaks, resource exhaustion, input validation, global state dependencies, JSON processing vulnerabilities, resource cleanup) that have been fixed. Command execution for `say_tts` uses `exec.CommandContext` with argument separation, and extensive shell script testing (`hack_say_tts_suite.sh`) explicitly validates prevention of various command injection attacks. API keys are managed via environment variables and masked in logs. HTTPS is used for external API calls, and request timeouts are implemented. Overall, security appears to be a high priority and well-addressed.

Similar Servers

Stats

Interest Score43
Security Score9
Cost ClassMedium
Avg Tokens75
Stars34
Forks7
Last Update2025-11-24

Tags

Text-to-SpeechMCPAIGoAPI Integration