advocu-docker-mcp
Verified Safeby sarthaksavvy
Overview
This MCP server enables AI agents to submit various community activities (feedback sessions, resources, public speaking, events, amplifications) to the Advocu platform and to scrape web content for metadata.
Installation
docker run -i --rm -e ADVOCU_API_KEY=your_api_key_here sarthaksavvy/advocu-mcp-server:latestEnvironment Variables
- ADVOCU_API_KEY
- ADVOCU_API_URL
Security Notes
The server uses `execFileAsync` to run `curl` for the `scrape_content` tool, which takes a user-provided URL. While there is basic HTTPS URL validation, this pattern can be a potential vector for Server-Side Request Forgery (SSRF) if run in an environment with access to internal networks, allowing a malicious actor to probe internal services. The `maxBuffer` for `curl` is set to a relatively large 10MB, which could be a minor resource exhaustion vector if exploited. The `ADVOCU_API_KEY` is correctly handled via environment variables. The `DOCKER.md` states `ADVOCU_API_URL` is hardcoded for Docker usage, which might limit flexibility, but it's not a direct security vulnerability as the endpoint itself is known.
Similar Servers
mcp-omnisearch
Provides a unified interface for various search, AI response, content processing, and enhancement tools via Model Context Protocol (MCP).
yt-dlp-mcp
Integrate video platform capabilities like search, metadata extraction, and content download into AI agents using yt-dlp.
agentql-mcp
Integrates AgentQL's data extraction capabilities to extract structured data from web pages using natural language prompts.
mcp-server
A Model Context Protocol (MCP) server that integrates with SerpApi to provide comprehensive search engine results and data extraction to an LLM.