illustrator-mcp-server

The `run` tool executes arbitrary ExtendScript/JavaScript code directly within Adobe Illustrator via COM (Windows) or AppleScript (macOS). While this is the core intended functionality, it means any script provided by the MCP client is executed with the privileges of the Illustrator application. This poses a significant security risk if the client or the source of the scripts is untrusted, as malicious scripts could potentially interact with the file system, network, or other system components via Illustrator's scripting environment. No explicit Python `eval` or hardcoded secrets are found in the server's Python code itself. Robust error handling is present, converting exceptions into `TextContent` responses instead of crashing the server.