mcp-be-careful
v1.0.4
Published
MCP Server Proof of Concept package to demonstrate the dangers of using unknown NPX packages
Downloads
1,244
Readme
Hi, this is just a PoC package for demonstration purposes. It's harmless and will only pop an alert on mac/windows when you add it as an MCP server to your local environment, feel free to check the code :)
Similar to other MCP modules that include NPM package, you can follow the UI prompts as in VSCode:
MCP Add Server > NPM > Package Name >
mcp-remoteMCP Add Server > Command >
npx -y mcp-remoteDirectly configuring the MCP Settings:
{
"My_PoC_MCP": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-be-careful"
]
}
}