Freellms Gateway MCP Server

What the code does

We read the source, 1 d ago · rules 995398eba69f

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

    execFile("sudo", ["-n", "-u", "nobody", JAILRUN, String(tmo), JAIL_HOME, "--",

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

    {"provider": "openai", "key": "sk-proj-8YtV3mN2bQ1xW9zK7jH4fD6sA0pL5rT8uI2oE4cG7vB",

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        const fullPath = path.join(TEMPLATES_ROOT, tpath); // VULN: path.join doesn't prevent ../

    return pickle.loads(raw)

        result = eval(expr, {"__builtins__": {"len": len, "sum": sum, "sorted": sorted,

        p = subprocess.run(['sudo', '-n', '-u', 'nobody', JAILRUN, str(timeout), JAIL_HOME, '--', *argv], capture_output=True, timeout=timeout + 5)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

claude mcp add freellms-gateway --transport sse https://mcp.freellms.net/sse

https://mcp.freellms.net/sse

[mcp_servers.freellms-gateway]
url = "https://mcp.freellms.net/sse"

{
  "mcpServers": {
    "freellms-gateway": {
      "url": "https://mcp.freellms.net/sse"
    }
  }
}

{
  "servers": {
    "freellms-gateway": {
      "type": "sse",
      "url": "https://mcp.freellms.net/sse"
    }
  }
}

This server publishes 5 more addresses. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Endpoints