Back to Home
cloudinary icon

environment-config-mcp

by cloudinary

Overview

This MCP server enables AI applications to manage Cloudinary environment configurations, including transformations, upload presets, streaming profiles, webhooks (triggers), and upload mappings.

Installation

Run Command
npx @cloudinary/environment-config-mcp start --cloud-name "your_cloud_name" --api-key "your_api_key" --api-secret "your_api_secret" --transport stdio

Environment Variables

  • CLOUDINARY_CLOUD_NAME
  • CLOUDINARY_API_KEY
  • CLOUDINARY_API_SECRET
  • CLOUDINARY_OAUTH2
  • CLOUDINARY_URL
  • CLOUDINARY_DEBUG

Security Notes

The `cloudinaryAuthHook.ts` contains logic to resolve `file://` URIs by reading local files from the server's filesystem and converting them to base64. If any exposed tool or prompt allows user-controlled input for a `file` parameter (e.g., for uploading assets) to be a `file://` URI without strict validation, this creates a critical Local File Inclusion (LFI) vulnerability. An attacker could read arbitrary files from the server. Additionally, the `UploadPreset` model includes an `eval` field, which, if evaluated unsafely by the underlying Cloudinary API or any part of the server, could lead to arbitrary code execution. These are significant risks.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-11-30

Tags

cloudinaryenvironment-configmedia managementAPI configurationdev-tools