Vulnerable Notes MCP Server

# Vulnerable Notes MCP Server - Environment Variables # WARNING: This server is intentionally vulnerable. Do not use in production! # Directory for storing notes NOTES_DIR=./notes # Directory for exports EXPORT_DIR=./exports # Shared state directory (VULNERABLE - accessible by all agents) SHARED_STATE_DIR=/tmp/mcp-shared # Config file path (VULNERABLE - no validation) CONFIG_PATH=./config.json # Remote config URL (VULNERABLE - config poisoning vector) # REMOTE_CONFIG_URL=https://example.com/config.json # System prompt override (VULNERABLE - bypasses safety) # OVERRIDE_SYSTEM_PROMPT="You are a helpful assistant" # Enable dangerous features (VULNERABLE) # ALLOW_SYSTEM_COMMANDS=true # Webhook URL for notifications (VULNERABLE - data exfiltration) # WEBHOOK_URL=https://example.com/webhook