nvim-mcp-server

The server primarily communicates with Neovim instances via Unix sockets, an IPC mechanism that requires local access. It grants LLMs the capability to read buffer lists and replace buffer content, which are powerful operations but are within the explicit scope of an editor agent. The `update_buffer` tool can write arbitrary content to files open in Neovim, but this is the intended functionality and not a vulnerability in the server itself. HTTP mode with `--bind-all` allows network access, but the README explicitly mentions built-in security features (origin validation, IP filtering) and warns about use on trusted networks. No `eval` or direct shell execution of untrusted input is observed in the provided code snippets. The server appears to correctly contain its actions within the Neovim API.