Back to Home
thousandmiles icon

lsp-mcp-server

Verified Safe

by thousandmiles

Overview

Provides semantic code analysis capabilities, such as go-to-definition and find-references, by bridging Model Context Protocol (MCP) tool calls to a Language Server Protocol (LSP) server.

Installation

Run Command
node build/index.js

Security Notes

The server spawns a local `typescript-language-server` instance and reads local files via `fs.readFile` based on paths provided as tool arguments. While this is necessary for its functionality, it operates with the permissions of the user running it and can access any file the user has access to within the project root. An agent controlling the `filePath` or `query` arguments could potentially read or process sensitive local files, though no direct code injection or arbitrary command execution vulnerabilities (like `eval`) are present. The primary risk is the scope of file system access granted to the process and the data an agent might request from it.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens2000
Stars0
Forks0
Last Update2025-11-22

Tags

Semantic Code AnalysisLSPMCPCode NavigationTypeScript