Back to Home
nanbingxyz icon

5ire

by nanbingxyz

Overview

A desktop AI assistant client that integrates with various LLM providers and supports extensible tool and prompt functionalities via the Model Context Protocol (MCP).

Installation

Run Command
npm run dev

Environment Variables

  • CRYPTO_SECRET
  • SUPA_PROJECT_ID
  • SUPA_KEY
  • SENTRY_DSN
  • SENTRY_KEY
  • AXIOM_TOKEN
  • AXIOM_ORG_ID
  • NODE_EXTRA_CA_CERTS
  • PATH

Security Notes

The application allows installation and execution of external MCP servers, including local ones that can run arbitrary commands, posing a significant risk for arbitrary code execution. The IPC handler for network requests (`ipcMain.handle("request")`) provides broad network access from the renderer process without sufficient protocol restrictions or sandboxing for all uses, potentially enabling internal network attacks. Direct SQL execution via IPC (`db-all`, `db-run`, `db-transaction`) could be vulnerable to injection if parameters are not consistently handled as prepared statements. Critically, the `CRYPTO_SECRET` environment variable, used for encryption, defaults to an empty string if not configured, rendering encrypted data easily decipherable.

Similar Servers

Stats

Interest Score100
Security Score3
Cost ClassMedium
Avg Tokens3000
Stars4833
Forks368
Last Update2025-12-05

Tags

AI AssistantMCP ClientLocal RAGDesktop ApplicationAI Tools