Back to Home
railsstudent icon

fake-store-mcp-server

by railsstudent

Overview

This server simulates a fake store within a Minecraft server, allowing external applications to browse items, purchase them via bot commands, and check the bot's status.

Installation

Run Command
npm install && npm start

Environment Variables

  • PORT
  • MC_HOST
  • MC_PORT
  • MC_USERNAME
  • MC_PASSWORD

Security Notes

The `POST /buy` endpoint directly uses user-provided `itemId` and `quantity` to construct a Minecraft chat command (`bot.chat`). This pattern could be vulnerable to command injection if the target Minecraft server or its plugins interpret special characters or commands within chat messages. The use of `cors()` without specific origin restrictions also broadens the potential attack surface. Sensitive information like `MC_PASSWORD` is correctly handled via environment variables.

Similar Servers

Stats

Interest Score0
Security Score6
Cost ClassLow
Avg Tokens20
Stars0
Forks0
Last Update2025-12-01

Tags

MinecraftBotAPIE-commerceGaming