Letta-MCP-server

The server acts as a proxy to a Letta backend. The `upload_tool` explicitly handles user-provided Python source code, which the Letta backend then processes. If the Letta backend's execution environment is not sufficiently sandboxed, this could lead to arbitrary code execution vulnerabilities. The `export_agent` tool allows specifying an `xbackbone_url` and `xbackbone_token` as arguments, overriding environment variables. A compromised or socially engineered agent could be instructed to export sensitive data to a malicious external server using this mechanism. While the HTTP transport includes origin validation and protocol version checks, these core functionalities pose significant risks if not managed with extreme caution on the backend and by trusting user inputs.