uniclare-client
by viraj-sh
Overview
Provides an unofficial client for Uniclare/Student Uni Portal to reveal hidden academic marks and integrates an MCP server for LLM-driven analysis.
Installation
docker run -p 8000:8000 --name uniclare-client --restart unless-stopped virajsh/uniclare-client:latestEnvironment Variables
- PHPSESSID
- PORT
- UNICLARE_QUIET
Security Notes
The server stores the PHPSESSID (session ID) in a local '.env' file, which poses a local data security risk if the machine is compromised. Crucially, the FastAPI application is configured with 'allow_origins=['*']' for CORS, making it vulnerable to cross-site request forgery (CSRF) and other web-based attacks if deployed publicly without proper domain restrictions. Additionally, sensitive student data (profile, results) is cached unencrypted in a local SQLite database by 'requests_cache', increasing local data exposure risk. While the project is explicitly for 'personal educational purposes', this CORS setting is a critical security flaw for any public-facing deployment. No 'eval' or obvious malicious patterns were found in the provided source code.
Similar Servers
mcp-mifosx-self-service
Enables AI-driven banking workflows, including authentication, account access, beneficiary management, and transfers, by securely interacting with Apache Fineract/MifosX Self-Service APIs.
Varon-AI
A multi-agent AI system designed to coordinate specialized AI tools for complex real-world task execution and automation, including coding, research, scraping, and content generation.
MUSTer_MCP
Automate interactions with M.U.S.T. (Macau University of Science and Technology) campus systems like Moodle and Wemust for tasks such as retrieving class schedules, listing courses, checking assignments and deadlines, downloading course materials, and opening authenticated web pages.
MCP-Http-Client
This repository provides an HTTP client library or application designed to interact with services likely related to the Minecraft Mod Coder Pack (MCP) ecosystem.