Little_MCP
by ricard1406
Overview
A local AI assistant leveraging Retrieval-Augmented Generation (RAG) and multi-tool agents for document Q&A, real-time information, and SQL database interaction.
Installation
python mcp_server.pyEnvironment Variables
- OPENWEATHER_API_KEY
- DB_USER
- DB_PASSWORD
Security Notes
The server-side SQL tools (`get_SQL_response` and `put_SQL_insert`) directly execute user-provided SQL queries/statements (`myParam`) against a MariaDB database without proper sanitization. This constitutes a critical SQL Injection vulnerability, allowing attackers to perform arbitrary database operations (e.g., read, update, delete, or drop tables) if they can directly access the `/get_SQL_response` or `/put_SQL_insert` API endpoints. While the client-side agent is designed to generate SQL, direct API access bypasses this, making the system highly vulnerable.
Similar Servers
5ire
A desktop AI assistant client that integrates with various LLM providers and connects to Model Context Protocol (MCP) servers for extended tool-use and knowledge base capabilities.
mcp-local-rag
Local RAG server for developers enabling private, offline semantic search with keyword boosting on personal or project documents (PDF, DOCX, TXT, MD, HTML).
rag-server-mcp
Provides Retrieval Augmented Generation (RAG) capabilities to Model Context Protocol (MCP) clients by indexing project documents and retrieving relevant content for LLMs.
Little_MCP
A local AI assistant leveraging Retrieval-Augmented Generation (RAG) and multi-tool agents for document Q&A, real-time information, and SQL database interaction.