mcp-devtools

The server features a comprehensive, multi-layered security framework for access control and content analysis, configurable via YAML rules, and includes protections against common threats like shell injection and data exfiltration. Tools like 'filesystem' and 'docprocessing' integrate with these controls. However, the 'proxy' tool explicitly bypasses this security middleware for upstream proxied tools, making it a significant potential risk for unvetted external services. Agent tools (e.g., Claude, Codex) also feature a 'yolo-mode' to bypass permissions, which presents a high risk if used carelessly. Additionally, content analysis occurs *after* content has been fetched by the tools, meaning a network request is still made even if content is ultimately blocked. The system primarily relies on environment variables for sensitive data, which is good practice.