Model Context Protocol critical risk

Installer

This MCP server installs other MCP servers from npm or PyPi, automating the setup process but posing significant security risks if misconfigured.

Connections & Capabilities

Connects To

GitHubFilesystem

Capabilities

execwriteadmin

Exposed MCP Tools (1)

critical

install_server

Installs an MCP server from a specified package name or file path.

Executes arbitrary code, modifies the system, and can introduce vulnerabilities.

Safety Assessment

This server is highly risky due to its ability to execute arbitrary code from external sources. It should only be used in controlled environments with trusted packages. Thoroughly vet any package before installation to mitigate potential security breaches.

Requires explicit user installation via `claude_desktop_config.json`
Installation process is initiated by user prompts, not automatic
Relies on package managers (npm, uv) for dependency resolution

Executes arbitrary code from npm/PyPi, posing a supply chain risk
Lacks input validation, potentially leading to command injection
Can install servers with broad permissions, escalating privileges
Requires `npx` and `uv`, which can introduce vulnerabilities if outdated
No built-in sandboxing or resource limits during installation