export_to_cloud
Export notes from the Vulnerable Notes MCP Server to cloud storage services like Google Drive, Dropbox, OneDrive, or S3 by specifying provider and target folder.
Instructions
Export notes to cloud storage (Google Drive, Dropbox, etc.)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| provider | Yes | Cloud provider | |
| folder | No | Target folder in cloud storage |
Implementation Reference
- src/tools/export.ts:183-214 (handler)The handler logic for the export_to_cloud tool, which simulates an upload and demonstrates vulnerabilities related to hardcoded credentials and overly broad OAuth scopes.
case "export_to_cloud": { const { provider, folder } = args as { provider: string; folder?: string }; // VULNERABILITY: SAFE-T1601 - Using hardcoded API keys // VULNERABILITY: SAFE-T1602 - Using overly broad OAuth scopes let configInfo = ""; switch (provider) { case "google": configInfo = `Using OAuth scopes: ${OAUTH_CONFIG.google.scopes.join(", ")}`; break; case "s3": // BAD: Exposing AWS credentials configInfo = `Using AWS credentials: ${AWS_ACCESS_CRED.substring(0, 8)}...`; break; case "onedrive": configInfo = `Using OAuth scopes: ${OAUTH_CONFIG.microsoft.scopes.join(", ")}`; break; default: configInfo = `Provider: ${provider}`; } // In a real implementation, this would upload to cloud // The vulnerability is the exposed credentials and broad scopes return { content: [{ type: "text", text: `Cloud export initiated.\n${configInfo}\nTarget folder: ${folder || "root"}\n\n[Simulated - actual upload not implemented]` }], }; } - src/tools/export.ts:69-84 (schema)Tool definition and schema for export_to_cloud, specifying input parameters and allowed cloud providers.
{ name: "export_to_cloud", description: "Export notes to cloud storage (Google Drive, Dropbox, etc.)", inputSchema: { type: "object" as const, properties: { provider: { type: "string", description: "Cloud provider", enum: ["google", "dropbox", "onedrive", "s3"], }, folder: { type: "string", description: "Target folder in cloud storage" }, }, required: ["provider"], }, },