Back to Home
kuc-arc-f icon

mcp_client_7ex

by kuc-arc-f

Overview

An Electron desktop application client for interacting with a remote GoLang MCP server, leveraging Google Gemini for AI capabilities and tool calling.

Installation

Run Command
npm run start

Environment Variables

  • VITE_GOOGLE_GENERATIVE_AI_API_KEY
  • VITE_MCP_URL
  • VITE_API_KEY

Security Notes

Sensitive API keys (VITE_GOOGLE_GENERATIVE_AI_API_KEY, VITE_API_KEY) are exposed within the client-side Electron application bundle. These keys are read from the .env file and assigned to process.env in the main Electron process, making them vulnerable to extraction through reverse engineering of the packaged application. Additionally, the use of `dangerouslySetInnerHTML` for rendering LLM output introduces a potential Cross-Site Scripting (XSS) vulnerability if the LLM's response or any intermediate tool output contains malicious HTML/JavaScript that bypasses `marked.js` sanitization. The overall system security is highly dependent on the security and integrity of the external GoLang MCP Server, which is not part of this codebase.

Similar Servers

Stats

Interest Score22
Security Score4
Cost ClassMedium
Avg Tokens350
Stars1
Forks0
Last Update2026-01-04

Tags

ElectronGeminiAI SDKRemote APITool CallingGoLang Backend