typedb-mcp

The server uses default hardcoded TypeDB credentials ('admin'/'password') in `config.py` and `docker-compose.yml`, which are security risks if not overridden or changed for production. The MCP server binds to all network interfaces (`0.0.0.0`) without explicit authentication on the MCP endpoint itself, meaning anyone with network access to the server can interact with TypeDB if valid credentials are provided to the MCP server. It also allows execution of arbitrary TypeQL queries (read, write, schema) through its API, which could be exploited by a malicious or compromised AI assistant or user to perform destructive actions or extract sensitive data. While the application's intent is to serve a trusted AI assistant, these aspects require careful operational security planning (e.g., network isolation, robust TypeDB credentials, and possibly an additional authentication layer for the MCP server).