gradle-mcp

The server's core functionality involves executing arbitrary Gradle commands on the local file system, granting it significant power within the project's context. It explicitly warns users: 'DO NOT EVER EXPOSE THIS SERVER TO THE INTERNET.' This is a critical advisory, as exposing a server capable of arbitrary code execution would be a severe security risk. There are no obvious hardcoded secrets, `eval` usage, or obfuscation. It handles user consent for publishing build scans to public services, which is a good practice. The control over environment variables and JVM arguments given to the client is intentional for its purpose but emphasizes the need for a trusted operating environment.