io.github.Wolfe-Jam/grok-faf-mcp

grok-faf-mcp

First MCP server for Grok. URL-based AI context using IANA .faf format.

17 536/wk 15 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, sse

15 tools · ~555 tok

Grade B · 0.3% of 200K ctx

MCPpedia last refreshed this data 19h ago

Edit this pageView history

io.github.Wolfe-Jam/grok-faf-mcp is an MCP server that first MCP server for Grok. URL-based AI context using IANA .faf format. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 86/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "grok-faf": {
      "args": [
        "-y",
        "grok-faf-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-wolfe-jam-grok-faf-mcp)](https://mcppedia.org/s/io-github-wolfe-jam-grok-faf-mcp)

Read me

What io.github.Wolfe-Jam/grok-faf-mcp does

Every README should answer these questions. Here's ours:

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'grok-faf-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

86/100across 5 weighted dimensions

How we score →

0255075100

−14

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

GHSA-cc2g-gq8c-r332high · fixedCVSS 7.5

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve()`) straight into a filesystem read **without confining it to a trusted project directory**. An absolute path or `../` traversal is resolved and used as-is, so the server process can be made to read files outside the intended `.faf` project context. The only remaining limit is OS file permissions. ### Affected tools `refresh_faf`, `faf_score`, `faf_get_orchestrat

Affected: >= 0Fixed in 1.5.3source →

Inventory

Tools (15)

Click any tool to inspect its schema.

~555 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Wolfe-Jam/grok-faf-mcp safe to use?: io.github.Wolfe-Jam/grok-faf-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.Wolfe-Jam/grok-faf-mcp?: io.github.Wolfe-Jam/grok-faf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.Wolfe-Jam/grok-faf-mcp do?: io.github.Wolfe-Jam/grok-faf-mcp provides 15 tools: faf_init, faf_auto, faf_score, faf_status, faf_enhance and 10 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.Wolfe-Jam/grok-faf-mcp?: io.github.Wolfe-Jam/grok-faf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.Wolfe-Jam/grok-faf-mcp actively maintained?: io.github.Wolfe-Jam/grok-faf-mcp is actively maintained — last commit was 2 days ago. It has 17 GitHub stars.

Similar servers

Others in ai-ml

View all →

Dsh MCP Client97

MCP client bridge: connects to MCP servers and registers their tools on ctx.tools

196.7k 4

Gpt Researcher97

An autonomous agent that conducts deep research on any data using any LLM providers

29.2k 5

Modelcontextprotocol96

The official MCP server implementation for the Perplexity API Platform

2.5k 4

io.github.mims-harvard/tooluniverse96

1000+ scientific tools for AI scientists: life science, reserach, literature, and more.

1.7k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.Wolfe-Jam/grok-faf-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Frequently Asked Questions

Is io.github.Wolfe-Jam/grok-faf-mcp safe to use?

io.github.Wolfe-Jam/grok-faf-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install io.github.Wolfe-Jam/grok-faf-mcp?

io.github.Wolfe-Jam/grok-faf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.Wolfe-Jam/grok-faf-mcp do?

io.github.Wolfe-Jam/grok-faf-mcp provides 15 tools: faf_init, faf_auto, faf_score, faf_status, faf_enhance and 10 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.Wolfe-Jam/grok-faf-mcp?

io.github.Wolfe-Jam/grok-faf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.Wolfe-Jam/grok-faf-mcp actively maintained?

io.github.Wolfe-Jam/grok-faf-mcp is actively maintained — last commit was 2 days ago. It has 17 GitHub stars.