Back to Home
ricard1406 icon

Little_MCP

by ricard1406

Overview

A local AI assistant leveraging Retrieval-Augmented Generation (RAG) and multi-tool agents for document Q&A, real-time information, and SQL database interaction.

Installation

Run Command
python mcp_server.py

Environment Variables

  • OPENWEATHER_API_KEY
  • DB_USER
  • DB_PASSWORD

Security Notes

The server-side SQL tools (`get_SQL_response` and `put_SQL_insert`) directly execute user-provided SQL queries/statements (`myParam`) against a MariaDB database without proper sanitization. This constitutes a critical SQL Injection vulnerability, allowing attackers to perform arbitrary database operations (e.g., read, update, delete, or drop tables) if they can directly access the `/get_SQL_response` or `/put_SQL_insert` API endpoints. While the client-side agent is designed to generate SQL, direct API access bypasses this, making the system highly vulnerable.

Similar Servers

Stats

Interest Score13
Security Score2
Cost ClassLow
Avg Tokens750
Stars3
Forks1
Last Update2025-12-17

Tags

AI AssistantRAGLocal LLMMulti-Tool AgentFastAPI