Back to Home
programinglive icon

dev-workflow-mcp-server

by programinglive

Overview

An MCP (Model Context Protocol) server that helps enforce development discipline and workflow best practices, acting as a 'coding conscience' to guide developers through structured processes for testing, documentation, and releases.

Installation

Run Command
npx @programinglive/dev-workflow-mcp-server

Environment Variables

  • DEV_WORKFLOW_USER_ID
  • DEV_WORKFLOW_STATE_FILE
  • DEV_WORKFLOW_WEB_PORT
  • DEV_WORKFLOW_FORCE_RELEASE
  • DEV_WORKFLOW_SKIP_RELEASE
  • PORT

Security Notes

The server directly executes arbitrary shell commands provided by the client via the `perform_release` and `run_full_workflow` tools (e.g., `exec(finalCommand)` in `handlers.js`). While Git command arguments are escaped, the `releaseCommand` itself (e.g., `npm run release:patch`) is not sanitized before execution. This constitutes a severe command injection vulnerability if the MCP server receives untrusted input or is integrated with a client that doesn't perform rigorous input sanitization, potentially allowing arbitrary code execution on the host machine where the server is running.

Similar Servers

Stats

Interest Score30
Security Score3
Cost ClassMedium
Avg Tokens200
Stars1
Forks0
Last Update2025-12-11

Tags

workflow-enforcementdeveloper-toolstestingdocumentationrelease-management