Back to Home
maxturazzini icon

claude-viewer

Verified Safe

by maxturazzini

Overview

An administrative web application for multi-user visualization and analytics of Claude Code conversation history, supporting direct querying via MCP.

Installation

Run Command
npm start

Environment Variables

  • CLAUDE_VIEWER_PORT

Security Notes

The application reads conversation data from local user directories (`~/.claude/`), which inherently requires broad file system access. Input parameters for MCP tools are validated using `zod`. File paths are constructed using `path.join`, mitigating direct path traversal risks. HTML escaping (`escapeHtml()`) is used in the frontend for XSS protection. The `exec` and `spawn` calls in `mcp-server.js` are used for internal commands (e.g., `curl` for health check, `node server.js` for starting web server, browser `open` command) with controlled arguments, reducing direct command injection risk. No `eval` or obvious hardcoded secrets were found.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassLow
Stars0
Forks0
Last Update2025-12-13

Tags

claude-codeconversation-vieweradmin-toolanalyticsmcp