orgmode-mcp

The server communicates primarily via standard I/O (stdio) using the Model Context Protocol (MCP), which means it typically runs as a local process and does not expose network ports, significantly reducing the external attack surface. It uses Zod for input validation for tool and prompt arguments, limiting the scope of client-controlled input. The core functionality involves reading local Org Mode files specified in a user-provided `config.json`. The primary security consideration is the user's responsibility in configuring the `orgFiles` array in `config.json`. If sensitive paths are included, the server will expose their content to the connected MCP client. However, the server itself does not perform arbitrary file writes, code execution from file content, or arbitrary path traversal outside of the explicitly configured glob patterns. The file parsing and content retrieval logic (`orgParser.ts`) appears to handle file reading safely without dynamic code execution.