Command Line MCP

MCP Tools and AgentsFreeOpen Source

MCP server allowing arbitrary command execution over CMD (explicitly flagged as dangerous).

🛡️ AgentReady threat assessment

MAESTRO 7-layer threat model + OWASP AIVSS risk score for Command Line MCP, derived from its capabilities.

AIVSS 10.0 · Critical

These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.

Overview

Exposes arbitrary command execution through CMD to an agent, with the README explicitly warning to be careful. It provides no meaningful sandboxing, so it is a textbook example of the arbitrary-code-execution MCP risk and belongs in a security directory as a high-risk pattern.

Key features and capabilities

Arbitrary CMD command execution
Minimal restrictions
Direct OS interaction

Use cases

Quick agent shell access (high risk)
System automation on Windows