mcp-learning
Verified Safeby sadjad-chrono
Overview
This MCP server provides a simple arithmetic 'add' tool for AI assistants like Claude, enabling them to perform basic addition operations locally.
Installation
npx -y @sadjadteh-chrono/mcp-learningSecurity Notes
The core functionality in `src/mcpserver/index.ts` (the 'add' tool) is simple and appears safe, using Zod for input validation and not involving file system access or dynamic code evaluation. However, the `package.json` includes `puppeteer` and `robotjs` as dependencies. These are powerful libraries capable of browser automation and desktop control (mouse, keyboard). While they are not currently utilized in the provided `index.ts`, their presence in a project described as providing 'arithmetic tools' introduces a potential risk for future, unaudited tool implementations or if a vulnerability were found that could leverage these high-privilege dependencies.
Similar Servers
chuk-mcp-math-server
Provides a highly configurable, high-performance server for a wide range of mathematical computations via the Mathematical Computation Protocol (MCP).
openai-responses-mcp
A lightweight MCP server for AI clients (like Claude Code/Desktop) to leverage OpenAI Responses API with autonomous web search capabilities over stdio.
codex-mcp
Provides a robust MCP server wrapper for Codex CLI to enable reliable session ID tracking for multi-turn AI conversations.
mcp-demo-servers
This server demonstrates how to build custom tools (arithmetic, weather) that can be integrated with Model Context Protocol (MCP) clients like Claude Desktop.