Back to Home
mattzcarey icon

txt2mcp

by mattzcarey

Overview

Converts text files or remote URLs into Model Context Protocol (MCP) servers, providing a searchable interface for AI agents.

Installation

Run Command
wrangler deploy

Environment Variables

  • MCPServer
  • BUCKET
  • ASSETS

Security Notes

The server fetches content from user-provided URLs in `/api/remote` and the `MCPServer.alarm` function. This presents a Server-Side Request Forgery (SSRF) vulnerability, as an attacker could potentially direct the server to make requests to internal network resources or sensitive Cloudflare metadata endpoints if the Worker runtime's network isolation is not sufficiently restrictive or if the URLs are not validated against private IP ranges/internal domains. While Cloudflare Workers offer some sandboxing, the code itself does not implement explicit URL validation to prevent this type of exploit.

Similar Servers

Stats

Interest Score48
Security Score6
Cost ClassHigh
Avg Tokens10000
Stars3
Forks0
Last Update2025-11-25

Tags

Cloudflare WorkersMCPFull-text SearchAI AgentsDocument Processing