usda-mcp
by rdwj
Overview
A basic real-time chat application that uses WebSockets for multi-user communication.
Installation
node server.jsEnvironment Variables
- PORT
Security Notes
Critical Cross-Site Scripting (XSS) vulnerability in `client.js`. User-provided messages from the WebSocket server are directly inserted into the DOM using `innerHTML` without sanitization, allowing malicious users to execute arbitrary JavaScript in other clients' browsers. The server broadcasts messages without sanitization, enabling this client-side flaw.
Similar Servers
odooMCP
Acts as a secure intermediary for AI agents (ChatGPT, Google Gemini) to interact with Odoo instances via a JSON-RPC 2.0 compliant API.
phone-a-friend-mcp
Enables real-time communication between multiple Claude Code instances, allowing one to listen and others to initiate conversations with specific intents.
askari-patrol-mcp-server
AI-powered security management assistant for WhatsApp and CLI, interacting with the Askari Patrol / GuardTour API.
chatbot-with-MCP-SERVER-CONNECT
A personal chatbot with memory that persists user data across sessions using Chainlit and the OpenAI Agents SDK configured for Google Gemini.