Security considerations for MarkItDown-MCP
mainThe MarkItDown-MCP server has the following security characteristics:
- No Authentication: The server does not support authentication.
- User Privileges: It runs with the privileges of the user executing it.
- Local Binding: When using SSE or Streamable HTTP, it binds to
localhostby default. DO NOT bind to other interfaces unless you understand the risks. - File Access: The
convert_to_markdowntool can read any file the server's user has access to.
Recommendation: Run the server in a sandboxed environment (like a container or VM) and ensure user permissions are strictly configured to limit access to sensitive files and network segments.