tinystruct-mcp

The server exposes powerful file system operations (read, write, delete, copy, move, mkdir) and Git commands (clone, pull, push) via JSON-RPC. These operations directly use user-provided paths without visible internal path validation or sandboxing beyond standard Java Path handling. If the server is exposed to untrusted users or runs with elevated file system permissions, it presents a critical risk, allowing arbitrary file manipulation or deletion on the host system. GitHub API calls require a personal access token, which, if compromised, grants full control over the specified repository. While JGit is used for Git operations (mitigating direct command injection risks), the overall design requires robust external authentication, authorization, and process sandboxing for safe deployment in any non-trusted environment.