Back to Home
ricard1406 icon

Little_MCP

by ricard1406

Overview

A local AI assistant leveraging Retrieval-Augmented Generation (RAG) and multi-tool agent capabilities with Ollama for document Q&A and real-time information.

Installation

Run Command
python mcp_server.py

Environment Variables

  • OPENWEATHER_API_KEY
  • DB_USER
  • DB_PASSWORD

Security Notes

The `get_SQL_response` and `Update_SQL` functions in `mcp_server.py` are vulnerable to SQL injection. They directly use user-provided input (`l_operation`) as SQL queries via `cur.execute()` without any sanitization or parameterization. This allows an attacker to execute arbitrary SQL commands, potentially leading to data exfiltration, modification, or deletion, especially with `Update_SQL`.

Similar Servers

Stats

Interest Score34
Security Score2
Cost ClassLow
Avg Tokens4000
Stars3
Forks1
Last Update2025-12-13

Tags

AI AssistantRAGOllamaFastAPILangChainMulti-Tool Agent