waldur-mcp-server

The 'query' tool allows arbitrary SQL queries to be executed against the Waldur API. Although it is described as 'read-only', directly exposing an SQL interface to an LLM without robust sanitization on the Waldur API side presents a critical SQL injection vulnerability and a high risk of unintended data exfiltration or manipulation. The 'schema_aware_query' prompt also provides a detailed database schema (meta.yaml) to the LLM, which further enables it to construct complex (and potentially malicious) SQL queries. Additionally, the 'create_invitation' tool performs a highly sensitive administrative action (inviting users and assigning roles) which, if misused or exploited via an LLM, could lead to unauthorized access or user management issues. There are no hardcoded secrets, as API credentials are expected from environment variables.