Vaara MCP Server

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

      "pattern": "bash\\s+-i\\s+>&?\\s+/dev/tcp/",

_METADATA_V4 = ipaddress.IPv4Address("169.254.169.254")

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        let proc = Process()

        result = subprocess.run([sys.executable, str(checker)])

        hash_alg, size_of_select = struct.unpack_from(">HB", attest_bytes, off)
        off += 3
        if off + size_of_select > len(attest_bytes):

      "message": "Read of /etc/shadow or related privileged files."

        r"\b(webhook\.site|requestbin|hookbin|beeceptor|mockbin|pipedream|"

  $("settings").innerHTML = Object.entries(c.fields).map(([key, f]) => {

const DEMO = {"envelope": {"payload": "eyJfdHlwZSI6Imh0dHBzOi8vaW4tdG90by5pby9TdGF0ZW1lbnQvdjEiLCJwcmVkaWNhdGUiOnsiYWdlbnRfaWQiOiJhZ2VudDphY21lL2NoZWNrb3V0LWJvdC8xIiwiZGVjaWRlZF9hdCI6IjIwMjYtMDYtMjNUMTI6MDA6MDVaIiwiZGVjaXNpb24iOiJkZW55IiwicG9saWN5X2V2YWx1YXRpb25zIjpbeyJwb2xpY3lfa…

    env = dict(os.environ) if env is None else env

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add vaara-server -- uvx vaara

{
  "mcpServers": {
    "vaara-server": {
      "args": [
        "vaara"
      ],
      "command": "uvx"
    }
  }
}

[mcp_servers.vaara-server]
command = "uvx"
args = ["vaara"]

{
  "mcpServers": {
    "vaara-server": {
      "args": [
        "vaara"
      ],
      "command": "uvx"
    }
  }
}

{
  "mcpServers": {
    "vaara-server": {
      "args": [
        "vaara"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: VAARA_DB (Path to the SQLite audit DB. Defaults to vaara_audit.db in the working directory.), VAARA_API_KEY (Optional shared secret. When set, every tool call must include _api_key in its arguments. Leave unset for single-tenant stdio deployments where process isolation is enough.). The author declared them in the registry entry; get the values from the project itself.