{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_79wcycge284y","handle":"mcp-feedback-enhanced","url":"https://wellknown.network/agents/mcp-feedback-enhanced","links":{"self":"https://wellknown.network/agents/mcp-feedback-enhanced/record.json","html":"https://wellknown.network/agents/mcp-feedback-enhanced","markdown":"https://wellknown.network/agents/mcp-feedback-enhanced/record.md","api":"https://wellknown.network/api/v1/agents/mcp-feedback-enhanced","status":"https://wellknown.network/api/v1/agents/mcp-feedback-enhanced/status","claim":"https://wellknown.network/agents/mcp-feedback-enhanced/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-feedback-enhanced/claim.json","badge":"https://wellknown.network/agents/mcp-feedback-enhanced/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-feedback-enhanced/history","tools":"https://wellknown.network/api/v1/agents/mcp-feedback-enhanced/tools"},"ard":{"identifier":"urn:air::server:mcp-feedback-enhanced","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-feedback-enhanced","summary":"MCP server for interactive user feedback in AI-assisted development, featuring dual interface support (Web UI and Desktop Application) with intelligent environment detection and cross-platform compatibility.","description":"# MCP Feedback Enhanced\n\n**🌐 Language / 語言切換:** **English** | [繁體中文](README.zh-TW.md) | [简体中文](README.zh-CN.md)\n\n**Original Author:** [Fábio Ferreira](https://x.com/fabiomlferreira) | [Original Project](https://github.com/noopstudios/interactive-feedback-mcp) ⭐\n**Enhanced Fork:** [Minidoracat](https://github.com/Minidoracat)\n**UI Design Reference:** [sanshao85/mcp-feedback-collector](https://github.com/sanshao85/mcp-feedback-collector)\n\n> ## 📢 Maintenance Status (2026-08)\n>\n> The project is maintained again. **Please upgrade to v2.6.1** — it fixes a command execution vulnerability:\n>\n> ```bash\n> uvx mcp-feedback-enhanced@latest\n> ```\n>\n> **What changed in v2.6.1:**\n> - 🔒 **Command execution removed** — fixes [#219](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/219) (unauthenticated WebSocket could execute arbitrary programs). The old blocklist only caught shell metacharacters, but since execution used `shell=False` metacharacters were never the risk — `cat`, `curl`, `wget`, `python` passed straight through, and auto-command was **enabled by default**. The feature is gone for good. See [SECURITY.md](SECURITY.md).\n> - 🔒 **Cross-Site WebSocket Hijacking fixed** (reported privately as `GHSA-cmr5-gpm3-79vf`, `GHSA-2wx7-r4rh-f663`): browsers are not restricted by the same-origin policy when opening a WebSocket, so a malicious page could make your browser connect to the local `/ws`. `Origin` is now validated before `accept()`, and cross-origin attempts are rejected with 403.\n> - 🐛 Fixed the Starlette breaking change that made the Web UI return 500 ([#213](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/213), [#217](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/217), [#221](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/221), [#228](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/228)).\n> - 🐛 Fixed image serialization ([#154](https://github.com/Minidoracat/mcp-feedback-enhanced/issues/154) and related) …","publisher":null,"homepage":"https://github.com/Minidoracat/mcp-feedback-enhanced","repository":"https://github.com/Minidoracat/mcp-feedback-enhanced","version":"2.8.5","license":null,"protocols":["mcp"],"tags":["ai","cross-platform","desktop-app","development","dual-interface","feedback","interactive","mcp","tauri","web-ui"],"pricing":null,"endpoints":[{"url":"pypi:mcp-feedback-enhanced","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.version-control","name":"Version Control","confidence":0.779,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.745,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-feedback-enhanced","registry":"pypi","observedAt":"2026-10-28T11:27:12.016Z","publishedAt":"2026-10-26T05:22:13.426649Z","latestVersion":"2.8.5"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-feedback-enhanced","url":"https://pypi.org/project/mcp-feedback-enhanced/","firstSeenAt":"2026-09-10T01:20:39.230Z","fetchedAt":"2026-10-28T11:25:28.150Z","normalizedAt":"2026-10-28T11:25:28.150Z"}]},"firstSeenAt":"2026-09-10T01:20:39.230Z","updatedAt":"2026-10-28T11:27:12.016Z"}