Back to Home
wrenchpilot icon

it-tools-mcp

by wrenchpilot

Overview

Provides a comprehensive Model Context Protocol (MCP) server offering over 100 IT tools and utilities for developers, system administrators, and IT professionals.

Installation

Run Command
npx it-tools-mcp

Environment Variables

  • NODE_ENV
  • MCP_DEV_MODE

Security Notes

CRITICAL: The server's 'cat', 'head', 'tail', and 'grep' tools allow arbitrary file reading from the host filesystem based on user-provided paths, without apparent sanitization or access control. This is a severe information disclosure vulnerability. Additionally, the 'curl' tool makes external network requests based on user input (URL string), which presents a potential Server-Side Request Forgery (SSRF) risk due to a lack of strict URL validation using a URL schema. The 'ssh' and 'scp' tools facilitate remote command execution and file transfer, which are powerful operations that require high trust in the input and can be abused if the MCP server itself is compromised. While robust input validation, rate limiting, and cryptographic library usage are present for other tools, the direct file access vulnerability significantly compromises the server's security posture.

Similar Servers

Stats

Interest Score40
Security Score1
Cost ClassLow
Avg Tokens150
Stars17
Forks3
Last Update2026-01-19

Tags

mcpdeveloper-toolsutilitiesnetwork-toolscrypto