Back to Home
keevaspeyer10x icon

ai-tool-bridge

Verified Safe

by keevaspeyer10x

Overview

Enables AI platforms to discover and invoke CLI tools and HTTP APIs using natural language commands, acting as a bridge between AI assistants and local tooling.

Installation

Run Command
ai-tool-bridge mcp serve

Environment Variables

  • AI_TOOL_BRIDGE_TRUSTED_MODULES

Security Notes

The codebase demonstrates strong security awareness with explicit fixes for previously identified vulnerabilities. It uses `subprocess.run(shell=False)` with list arguments, `Path.resolve(strict=True)` for directory validation (preventing symlink and traversal attacks), and `yaml.safe_load` for parsing manifests (preventing arbitrary code execution). Parameter names are validated via regex to prevent injection. Dynamic module loading via `AI_TOOL_BRIDGE_TRUSTED_MODULES` environment variable is explicitly allowed but requires user responsibility to trust the specified modules. Hardcoded secrets are not present in the application's runtime logic, though `SOPS_KEY_PASSWORD` is used externally for `sops` decryption.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassLow
Stars0
Forks0
Last Update2026-01-17

Tags

CLINatural LanguageAI ToolsMCPDeveloper Tools