Back to Home
josbeir icon

cakephp-synapse

by josbeir

Overview

Exposes CakePHP application functionality as tools, resources, and prompts to AI assistants via the Model Context Protocol, primarily for development workflows like code review, debugging, and documentation search.

Installation

Run Command
bin/cake synapse server

Environment Variables

  • MCP_SERVER_NAME
  • MCP_SERVER_VERSION
  • MCP_PROTOCOL_VERSION
  • MCP_DISCOVERY_CACHE
  • MCP_DOCS_CACHE_DIR
  • MCP_DOCS_SEARCH_DB
  • MCP_DOCS_AUTO_BUILD
  • MCP_TINKER_PHP_BINARY
  • MCP_TINKER_BIN_PATH
  • MCP_CAKEPHP_VERSION
  • MCP_PHP_VERSION

Security Notes

The plugin explicitly uses `eval()` in `src/Command/TinkerEvalCommand.php` to execute arbitrary PHP code. While intended as a core feature for a 'tinker' tool (interactive PHP exploration) and noted for development use, this presents a critical security vulnerability if the server or client is compromised, allowing remote code execution. The documentation explicitly warns against using it in production environments. Git operations (`clone`, `pull`) are executed via shell commands, but use `escapeshellarg()` for sanitization. File system operations for documentation caching require write permissions to `TMP` directory.

Similar Servers

Stats

Interest Score15
Security Score3
Cost ClassHigh
Avg Tokens4000
Stars2
Forks1
Last Update2025-12-23

Tags

CakePHPMCPAIPluginDevelopment ToolsCode AnalysisDocumentation