IIvoryOS MCPIvoryOS is a Python-based unified robot control web interface, developed for user-friendly workflow design and control for Self-Driving Labs (SDLs). It works by introspecting the Python script, dynamically searching for available module and their method. The methods are available through direct function calls and stacking into workflows for later iteration. The IvoryOS MCP support all features including designing, managing workflows, and interacting with the loaded hardware/software execution layer. * paper: https://www.nature.com/articles/s41467-025-60514-w * code: https://gitlab.com/heingroup/ivoryos

mcp-so:ivoryos-mcp_Ivory Zhang

View source
B
85/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

1

Score

85/100

HIGH 1

Findings (1)

HIGH
Internal IP range access
L46

Detects references to private/internal IP ranges in URL context

http://127.0.0.1:
FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.