Back to Home
mnemoverse icon

mcp-docs-server

by mnemoverse

Overview

A universal template for creating Model Context Protocol (MCP) servers that provide AI agents with documentation access.

Installation

Run Command
npx @mcp-x/mcp-docs-server

Security Notes

CRITICAL Path Traversal Vulnerability: The `getDocument` function in `src/lib/DocumentManager.ts` uses `path.join(this.docsPath, documentPath)` to resolve document paths. If `documentPath` is provided by an AI agent (or other user input) as an absolute path (e.g., `/etc/passwd` or `C:/Windows/System32/drivers/etc/hosts`), `path.join` will resolve to this absolute path, ignoring the intended `docsPath`. This allows arbitrary file reading outside the designated documentation directory. The server also executes shell commands in its build/template scripts but these are not runtime risks.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassMedium
Avg Tokens4500
Stars0
Forks0
Last Update2025-11-24

Tags

mcp-serverdocumentationai-agent-tooltypescripttemplate