marionette_mcp

The server acts as a bridge to the Flutter VM service, which is a powerful debug interface. While the server itself does not exhibit direct vulnerabilities like 'eval' or command injection in the truncated source, its purpose is to grant AI agents programmatic control over a debug-mode Flutter application. This means an AI agent could manipulate the connected app in various ways (tap, enter text, scroll, hot reload, access logs). It is crucial to use this server only with Flutter applications running in debug mode within controlled development environments, as it offers extensive access to the application's runtime.