forked from molecule-ai/molecule-core
5be8ba4b45
SAFE-T1201 (#807): Escape [MEMORY prefix in GLOBAL memory content on write to prevent delimiter-spoofing prompt injection. Content stored as "[_MEMORY " so it renders as text, not structure, when wrapped with the real delimiter on read. SAFE-T1102 (#805): Pin @molecule-ai/mcp-server@1.0.0 in .mcp.json.example. Prevents supply-chain attacks via unpinned npx -y. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
13 lines
223 B
Plaintext
13 lines
223 B
Plaintext
{
|
|
"mcpServers": {
|
|
"molecule": {
|
|
"type": "stdio",
|
|
"command": "npx",
|
|
"args": ["-y", "@molecule-ai/mcp-server@1.0.0"],
|
|
"env": {
|
|
"MOLECULE_URL": "http://localhost:8080"
|
|
}
|
|
}
|
|
}
|
|
}
|