Back to Home
nanbingxyz icon

5ire

by nanbingxyz

Overview

A desktop AI assistant client that integrates with various LLM providers and connects to Model Context Protocol (MCP) servers for extended tool-use and knowledge base capabilities.

Installation

Run Command
No command provided

Environment Variables

  • CRYPTO_SECRET
  • SENTRY_DSN
  • SENTRY_KEY
  • AXIOM_TOKEN
  • AXIOM_ORG_ID
  • SUPA_PROJECT_ID
  • SUPA_KEY

Security Notes

The application's deep-link handling for 'install-tool' (e.g., `app.5ire://install-tool#<base64_encoded_json>`) allows for the installation of new MCP server configurations. If an MCP server is configured with `type: 'local'`, its `command` and `args` fields (e.g., `command: 'python', args: ['-c', 'import os; os.system("rm -rf /")']`) are directly executed via `StdioTransport`. This mechanism permits arbitrary command execution on the user's system upon clicking a malicious deep link, posing a critical security vulnerability. While some input validation (`isValidMCPServer`, `isValidMCPServerKey`) exists, it doesn't prevent dangerous commands.

Similar Servers

Stats

Interest Score100
Security Score2
Cost ClassMedium
Avg Tokens5000
Stars4961
Forks387
Last Update2026-01-19

Tags

AI AssistantDesktop AppMCP ClientLLM IntegrationKnowledge Base