I
io.github.Wolfe-Jam/grok-faf-mcp
grok-faf-mcp
Persistent project context for xAI Grok. IANA-registered .faf format.
No known CVEs
MIT license
Actively maintained
Last commit 0d ago
Works with most clients
Transport: stdio, sse
15 tools · ~555 tok
Grade B · 0.3% of 200K ctx
MCPpedia last refreshed this data
io.github.Wolfe-Jam/grok-faf-mcp is an MCP server that persistent project context for xAI Grok. IANA-registered .faf format. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 86/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"grok-faf": {
"args": [
"-y",
"grok-faf-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-wolfe-jam-grok-faf-mcp)
Read me
What io.github.Wolfe-Jam/grok-faf-mcp does
Persistent project context for xAI Grok. IANA-registered .faf format.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'grok-faf-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
86/100across 5 weighted dimensions
0255075100
30
15
16
15
10
−14
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
GHSA-cc2g-gq8c-r332high · fixedCVSS 7.5
grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve()`) straight into a filesystem read **without confining it to a trusted project directory**. An absolute path or `../` traversal is resolved and used as-is, so the server process can be made to read files outside the intended `.faf` project context. The only remaining limit is OS file permissions. ### Affected tools `refresh_faf`, `faf_score`, `faf_get_orchestrat
Inventory
Tools (15)
Click any tool to inspect its schema.
~555 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.Wolfe-Jam/grok-faf-mcp safe to use?
- io.github.Wolfe-Jam/grok-faf-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install io.github.Wolfe-Jam/grok-faf-mcp?
- io.github.Wolfe-Jam/grok-faf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.Wolfe-Jam/grok-faf-mcp do?
- io.github.Wolfe-Jam/grok-faf-mcp provides 15 tools: faf_init, faf_auto, faf_score, faf_status, faf_enhance and 10 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.Wolfe-Jam/grok-faf-mcp?
- io.github.Wolfe-Jam/grok-faf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is io.github.Wolfe-Jam/grok-faf-mcp actively maintained?
- io.github.Wolfe-Jam/grok-faf-mcp is actively maintained - last commit was 0 days ago. It has 19 GitHub stars.
Related
Similar servers
Others in ai-ml
I
io.github.callstack/agent-device96MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
5.1k 5
I
io.github.HUANGCHIHHUNGLeo/claude-real-video96Let any LLM watch a video locally — and search everything it has ever watched.
2.3k 6
I
io.github.mims-harvard/tooluniverse962,700+ scientific tools for AI scientists: life science, research, literature, and more.
1.8k 4
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.6k 4
MCP Security Weekly
Get CVE alerts and security updates for io.github.Wolfe-Jam/grok-faf-mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.