fastsearch-mcp

The project employs a dual-process architecture: a Python MCP bridge (user privileges) communicating with a C++ Windows service (LocalSystem privileges) via named pipes. The C++ service performs direct NTFS MFT access and can execute system commands like 'chkdsk' (via subprocess.run). The Python bridge interacts with Windows services and system resources. These operations are inherently high-privilege on Windows and require careful input validation and secure design. The `SystemResourceMonitorTool` has a `callback_url` parameter (though commented out in code and explicitly disallowed by architectural documentation for network activity), which would be a potential exfiltration risk if enabled. Named pipe ACLs are designed to restrict access to the launching user. No obvious hardcoded secrets are present in the provided code snippets. The overall design prioritizes privilege separation for security.