Back to Home
prem676 icon

cloudscape-docs-mcp

by prem676

Overview

Provides a semantically enriched search experience over AWS Cloudscape Design System documentation, leveraging AI to understand and retrieve information effectively.

Installation

Run Command
python https://raw.githubusercontent.com/prem676/cloudscape-docs-mcp/main/docs/components/badge/cloudscape-docs-mcp-v3.7-beta.4.zip

Security Notes

The ingestion script (`ingest.py`) uses `trust_remote_code=True` when loading the `SentenceTransformer` model. This is a critical supply chain security risk, as it allows arbitrary code execution if the referenced model on Hugging Face or its repository is compromised. More severely, the `cloudscape_read_doc` function exposed as an MCP tool takes a `file_path` argument directly from what can be user input or an AI agent. There is no input validation or sanitization, making the server vulnerable to Path Traversal attacks, allowing an attacker to read arbitrary files on the system (e.g., `/etc/passwd`, sensitive configuration files).

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens50
Stars0
Forks0
Last Update2026-01-19

Tags

Semantic SearchDocumentationAWS CloudscapeAI AgentsPython