Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"lara-mcp": {
"command": "npx",
"args": [
"-y",
"@translated/lara-mcp"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Lara API official MCP server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@translated/lara-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
@translated/lara-mcp vulnerable to command injection in import_tmx tool
### Summary A command injection vulnerability exists in the `@translated/lara-mcp` MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in writing
Offline access to TwitterAPI.io docs for AI assistants. 58 endpoints, 32 pages, 24 blog posts.
Temporal memory for AI with decay and reinforcement. Two-layer storage (JSONL + Markdown).
MCP server that fetches YouTube video transcripts and optionally summarizes them
Local academic paper MCP server — 9-source search, multi-source download, AI analysis, translation, citation graph, code-based paper recommendation
MCP Security Weekly
Get CVE alerts and security updates for Lara Mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.