Python AI Kit
copier · by the-momentum
Python boilerplate for creating AI agents, MCP servers, API microservices and monolith services. All in one!
No known CVEs
MIT license
Actively maintained
Last commit 13d ago
Works with most clients
Transport: stdio
0 tools
Grade F
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
Python AI Kit is an MCP server that python boilerplate for creating AI agents, MCP servers, API microservices and monolith services. All in one. Its tool list has not been published yet over stdio, requires no API key, and scores 42/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"python-ai-kit": {
"args": [
"copier"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/python-ai-kit)
Read me
What Python Ai Kit does
A production-ready framework for building AI agents that actually work in production.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'copier' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
42/100across 5 weighted dimensions
0255075100
18
14
10
−58
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev7 fixed
CVE-2026-53951high · fixed
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
# Copier: trust-prefix bypass via path traversal runs tasks unprompted ### Summary In copier `>= 9.5.0, <= 9.15.1`, the `trust` setting's prefix match (`copier/_settings.py`) compares the template URL against a trusted prefix with a raw `str.startswith` and **no path normalization**, while the URL *is* normalized when the template is actually fetched (`Path.resolve()` for local paths; libcurl dot-segment removal for `https`). A template reference that textually starts with a trusted prefix but
CVE-2026-23986high · fixedCVSS 7.1
Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
### Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use [unsafe](https://copier.readthedocs.io/en/stable/configuring/#unsafe) features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently write to arbitrary directories outside the destination path by using directory a symlink along with [`_preserve_symlinks: true`](https://copier.readthedocs.io/en/stable/config
CVE-2026-23968medium · fixedCVSS 5.5
Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false
### Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use [unsafe](https://copier.readthedocs.io/en/stable/configuring/#unsafe) features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently include arbitrary files/directories outside the local template clone location by using symlinks along with [`_preserve_symlinks: false`](https://copier.readthedocs.io/en/stabl
CVE-2025-55214high · fixed
Copier's safe template has filesystem write access outside destination path
### Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use [unsafe](https://copier.readthedocs.io/en/stable/configuring/#unsafe) features like custom Jinja extensions which would require passing the `--UNSAFE,--trust` flag. As it turns out, a safe template can currently write files outside the destination path where a project shall be generated or updated. This is possible when rendering a [generated directory structure](https://copier.readth
CVE-2025-55201high · fixed
Copier's safe template has arbitrary filesystem read/write access
### Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using `{% include ... %}`, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to their counterparts in the template. Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use [unsafe](https://copier.readthedocs.io/en/stable/confi
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Python Ai Kit safe to use?
- Python Ai Kit has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install Python Ai Kit?
- Python Ai Kit supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Python Ai Kit?
- Python Ai Kit is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Python Ai Kit actively maintained?
- Python Ai Kit is actively maintained - last commit was 13 days ago. It has 65 GitHub stars.
Related
Similar servers
Others in ai-ml / developer-tools
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.5k 2
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.5k 1
I
io.github.callstack/agent-device96MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
5.1k 5
I
io.github.HUANGCHIHHUNGLeo/claude-real-video96Let any LLM watch a video locally — and search everything it has ever watched.
2.2k 6
MCP Security Weekly
Get CVE alerts and security updates for Python Ai Kit and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.