EasyMCP

The MCP generator itself requires `--privileged` Docker access and mounts `/var/run/docker.sock` to the host. This grants the container full root access to the host's Docker daemon, making it highly sensitive. If the generator or its inputs (tools/connectors) are compromised, it could lead to host system compromise. While this is intentional for its Docker-in-Docker build functionality, it necessitates extreme trust in the generator's code and all dynamic modules it processes. Dynamic execution of Python tools via `child_process` also presents a potential risk if inputs are not thoroughly sanitized. The project uses `zod` for schema validation and a `SecretManager` for credential handling, which are good practices, but the fundamental privilege requirement remains a critical security consideration.