Model Context Protocol moderate risk

Opendal

MCP server providing access to various storage services (S3, Azure, GCS, etc.) via Apache OpenDAL, configured through environment variables.

Connections & Capabilities

Connects To

GitHubGCPAzureS3

Capabilities

readwrite

Quickstart

Install

pip install mcp-server-opendal

Config

{
  "mcpServers": {
    "opendal": {
      "command": "uvx",
      "args": [
        "mcp-server-opendal"
      ],
      "env": {
        "YOUR_ENV_VAR": "YOUR_ENV_VALUE"
      }
    }
  }
}

Exposed MCP Tools (3)

safe

list

Lists files and directories within a configured storage service.

Read-only operation, no data modification.

safe

read

Reads the contents of a file from a configured storage service.

Read-only operation, no data modification.

moderate

write

Writes data to a file in a configured storage service.

Modifies data, but doesn't alter system configuration.

Safety Assessment

This server is relatively safe for read-only operations on well-configured storage services. The risk increases significantly if write/delete operations are enabled and environment variables are not carefully managed. Ensure proper access control on the underlying storage services.

Read and write operations are confined to configured storage services.
No direct execution of arbitrary code.
Configuration via environment variables promotes separation of concerns.
Utilizes Apache OpenDAL, a well-regarded data access layer.

Write and delete operations are possible, posing a risk of data modification or loss.
Misconfigured environment variables could lead to unintended access or exposure.
Lack of built-in authentication beyond environment variable-based configuration.
No explicit sandboxing or resource limits are mentioned.