Back to Home
philogicae icon

rqbit-mcp

by philogicae

Overview

Provides a Python API wrapper and an MCP (Model Context Protocol) server to interact with the rqbit torrent client.

Installation

Run Command
docker run -i -p 8000:8000 -e RQBIT_URL="http://localhost:3030" philogicae/rqbit-mcp:latest rqbit-mcp

Environment Variables

  • RQBIT_URL
  • RQBIT_HTTP_BASIC_AUTH_USERPASS

Security Notes

The `download_torrent` MCP tool (and underlying `RqbitClient.add_torrent` method) allows a remote client to specify a local file path. The server then reads the content of this local file and attempts to send it to the `rqbit` instance. This creates a critical local file disclosure/arbitrary file read vulnerability, allowing an attacker to read any file accessible by the server process (e.g., `/etc/passwd`). Additionally, the use of `network_mode: host` in the Docker Compose setup reduces network isolation, which requires careful host firewall configuration, and `RQBIT_HTTP_BASIC_AUTH_USERPASS` for rqbit authentication, while better than hardcoding, relies on proper handling of sensitive environment variables.

Similar Servers

Stats

Interest Score33
Security Score3
Cost ClassMedium
Avg Tokens1000
Stars3
Forks2
Last Update2026-01-15

Tags

Torrent clientAPI wrapperMCP serverPythonrqbit