Back to Home
hilitb icon

project-mcp

by hilitb

Overview

Provides an AI-native interface for managing project documentation, tasks, and architectural decisions through intent-based search and structured workflow tools.

Installation

Run Command
npx -y project-mcp

Environment Variables

  • DOCS_DIR

Security Notes

The server explicitly states that 'No authentication is performed - the server trusts the MCP client' and 'File paths are resolved relative to the current working directory'. Tools like `get_doc` and `readResource` take user-provided paths (`path` and `uri` arguments respectively). Although paths are resolved against predefined project directories (e.g., `PROJECT_ROOT`, `DOCS_DIR`), a malicious MCP client could craft path traversal sequences (e.g., `../../../../etc/passwd`) to read arbitrary files on the host system where the server is running. This is a severe vulnerability without proper sandboxing or authentication at the MCP client layer or server deployment environment, as it allows unauthorized data exfiltration.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens5000
Stars0
Forks0
Last Update2026-01-19

Tags

project-managementdocumentationai-agenttask-trackingsemantic-search