mcp-explorer

CRITICAL SECURITY RISK: The `POST /mcp/stdio/connect` endpoint allows users to specify arbitrary `command`, `args`, and `env` parameters, which are directly used to spawn subprocesses on the backend server. This design choice enables Remote Code Execution (RCE) by anyone who can access the API. There is no authentication or authorization layer to restrict who can initiate these connections. Furthermore, the `CORSMiddleware` is configured with `allow_origins=['*']`, which is a significant security vulnerability in a production environment as it allows cross-origin requests from any source, potentially facilitating CSRF and other attacks. The entire application is unsafe to run if the backend API is exposed to untrusted networks or users. It should only be used in a highly controlled and isolated development environment.