VCF Log Explorer (MCP)

An MCP server that provides native tools to dynamically search VMware Aria Operations for Logs (Log Insight).

This skill appears to do what it says, but review and harden before deploying: 1) The code disables TLS verification (requests.get(..., verify=False)) — acceptable for internal servers with self-signed certs but exposes you to MITM if used incorrectly; prefer supplying a CA bundle or enabling verification. 2) Verify the 'mcp' PyPI package source and pinned versions before pip install. 3) Treat LOGINSIGHT_API_TOKEN as highly sensitive; run the MCP server in an isolated environment or container and restrict access to the process. 4) Consider URL-encoding user-supplied keywords to avoid malformed requests. 5) If multiple agents or users share the host, be cautious that the env token is visible to local processes and administrators. If you want, I can suggest a small code patch to enable TLS verification and URL-encoding of the query parameter.

Type: OpenClaw Skill Name: vcf-loginsight-mcp Version: 1.0.1 The skill is a legitimate MCP server implementation for querying VMware Aria Operations for Logs (Log Insight). The code in server.py follows standard patterns for API interaction, using environment variables for credentials and returning formatted log data to the agent. While it disables SSL certificate verification (verify=False), this is a common (though insecure) practice in enterprise environments with self-signed certificates and does not indicate malicious intent.