SSwitch Bot Mcp ServerThe SwitchBot MCP Server is a Model Context Protocol (MCP) server that provides a feature to control SwitchBot devices interactively using SwitchBotAPI.

mcp-so:switch-bot-mcp-server_yasu89

View source

85/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

Score

85/100

HIGH 1

Findings (1)

HIGH

Inline code execution in MCP command MCPCFG_006

mcp-config L52

Detects MCP servers using inline code execution via -e, -c, or eval flags

"args": [
        "run",
        "-i",
        "--rm",
        "--name",
        "switch-bot-mcp-server",
        "-e",
        "SWITCH_BOT_TOKEN",
        "-e",
        "SWITCH_BOT_SECRET"

FIX

Restrict MCP server permissions to the minimum required. Remove broad filesystem, network, or execution permissions and use scoped access controls (specific directories, specific tools).

FP?

Likely FP if the broad permissions are in a development/testing configuration that is clearly not intended for production use.