Back to Home
tokenring-ai icon

mcp

by tokenring-ai

Overview

Client-side plugin for TokenRing agents to connect with Model Context Protocol (MCP) servers and register their external tools.

Installation

Run Command
No command provided

Security Notes

The `stdio` transport type allows arbitrary command execution via the `command` field in the configuration. If the application's configuration (specifically `mcp.transports[name].command`) can be sourced from or influenced by untrusted input, it poses a severe arbitrary code execution vulnerability. The `sse` and `http` transports also allow configurable URLs. If these URLs can be set by an untrusted source, it could lead to Server-Side Request Forgery (SSRF) or data exfiltration. Robust external validation of all configuration inputs is critical.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Stars0
Forks0
Last Update2026-01-13

Tags

AIAgentPluginTool IntegrationClient