poly-ssg-mcp
by hyperpolymath
Overview
Unified server for managing and interacting with various static site generators written in diverse programming languages, designed for integration with AI agents.
Installation
deno task startEnvironment Variables
- DENO_DEPLOYMENT_ID
- MCP_HTTP_MODE
- PORT
- HOST
Security Notes
The server uses `Deno.Command.run` to execute external SSG binaries. Critical command injection vulnerabilities exist in adapters like `Franklin`, `Documenter`, `StaticWebPages`, and `Coleslaw` where user-provided input (`path`, `template`, `title`) is directly interpolated into shell commands for `julia -e` or `sbcl --eval`. While `Executor.res.js` contains a `sanitizeArg` function, it is not consistently applied in all adapter execution functions, leaving multiple paths for arbitrary command execution. This is a severe risk.
Similar Servers
anymcp-io
A static site catalog for discovering and browsing single-file .NET MCP (Model Context Protocol) servers.
ai-skills-hub
Provides AI assistants with access to a team's coding standards, best practices, and knowledge base by dynamically loading Markdown skill files via an MCP server.
poly-cloud-mcp
Provides a unified Model Context Protocol (MCP) server for managing cloud resources across AWS, Google Cloud, Azure, and DigitalOcean, primarily enabling AI assistants to interact with these providers via their CLI tools.
poly-mcps
Provides a unified interface for managing various developer tools and infrastructure services across multiple domains through a single Model Context Protocol (MCP) server ecosystem.