mcp-registry

The `store_document` and `batch_index_folder` tools allow the AI agent to specify `file_path` and `source_dir` respectively, which can be relative or absolute paths on the server's filesystem. If the AI agent (which is controlled by user prompts) is not sufficiently sandboxed or the prompts are not strictly guarded against path manipulation, this creates a critical Local File Inclusion (LFI) or arbitrary file read vulnerability. An attacker could potentially instruct the AI agent to read sensitive files from the server's host system. This necessitates robust external security measures (e.g., Docker volume restrictions, AppArmor profiles, strict LLM prompt engineering, or an intermediary validation layer) beyond the application's default configuration. The server also binds to 0.0.0.0:3031, requiring firewalling in production.