RaspberryPiOS-MCP

The project demonstrates a high level of security awareness, implementing multiple layers of defense. It leverages Cloudflare Tunnel for secure internet exposure and OAuth for authentication. Inter-process communication (IPC) between the non-privileged server and the privileged agent uses a Unix domain socket, limiting attack surface. Role-Based Access Control (RBAC) is enforced for all tool calls, with granular permissions for 'viewer', 'operator', and 'admin' roles. Input validation and sanitization are consistently applied, particularly for parameters passed to underlying shell commands (e.g., systemctl, shutdown) and for package update commands (uv/pip), explicitly checking for dangerous characters and path traversal attempts. Hardware access (GPIO, I2C, Camera) is protected by whitelists and validation. Audit logging captures critical operations. While any system interacting with privileged commands carries inherent risk, the design includes robust mitigations.