Mcp Server Creator

Build and run a TypeScript-based MCP server that scaffolds tools and resources, handles requests, and extends AI capabilities with Model Context Protocol.

This skill will scaffold an MCP server and example tools. Before using it: (1) review and audit the generated code — the provided file_operations tool can read/write arbitrary filesystem paths and the db example references DATABASE_URL; remove or heavily restrict these tools if you don't intend that access; (2) do not run npm install or node code on sensitive machines without sandboxing (use a container/VM) and limit filesystem permissions; (3) add explicit input validation and allowed-path checks or authentication to the MCP server before exposing it to any agent or network; (4) ask the author for the missing pieces (performSearch implementation) and a clear security statement; (5) if you need only scaffolding, consider stripping example tools that access local files or databases. Proceed only if you understand and accept the risk of creating a service that can access host files and databases.

Type: OpenClaw Skill Name: mcp-server-creator Version: 1.0.0 The skill provides templates for building an MCP server with high-risk capabilities, specifically a file_operations tool in SKILL.md that enables reading, writing, and deleting files. While presented as a scaffolding example, the code lacks input sanitization (e.g., path traversal protection), which could be exploited if the agent implements the server as described. No evidence of intentional data exfiltration or malicious intent was found.