polymath-mcp

The server primarily interacts via the Claude Desktop MCP protocol or FastAPI endpoints. Input data (queries, content, statements) is generally passed to internal engines (RAG, Socratic) or database operations (ChromaDB, Neo4j) using parameterized queries, mitigating direct injection risks. There are no obvious 'eval' or direct arbitrary command execution from user input in the provided code. Default Neo4j credentials ('neo4j', 'password') are hardcoded but can be overridden by environment variables, which is a common practice for development defaults; users should change these for production. The `add_knowledge` tool allows users to add arbitrary markdown content; if a client application renders this content without proper sanitization, it could pose a Cross-Site Scripting (XSS) risk to the client, but the server itself does not execute the content.