Back to Home
080bct12alex icon

ChatBot_Development

by 080bct12alex

Overview

A LangGraph-based AI chatbot with a Streamlit UI, featuring conversation memory, tool integration (search, calculator, stock price), RAG capabilities for document analysis, Multi-Agent Collaboration (MCP), user authentication, and persistent storage.

Installation

Run Command
streamlit run with_mcp/app.py

Environment Variables

  • GOOGLE_API_KEY
  • ALPHAVANTAGE_API_KEY
  • LANGGRAPH_COOKIE_PASSWORD
  • LANGCHAIN_TRACING_V2
  • LANGCHAIN_ENDPOINT
  • LANGCHAIN_API_KEY
  • LANGCHAIN_PROJECT
  • OPENAI_API_KEY
  • MCP_URL

Security Notes

Critical security risks identified: The Alpha Vantage API key is hardcoded in multiple `agent.py` files. More severely, the Streamlit `EncryptedCookieManager` password is hardcoded as `7b9561efc4a6acf95c78285418225434533f70dd609026c8ff9ba1c50a5be6c6` or a placeholder `YOUR_RANDOM_SECRET_KEY_HERE` in `app.py` files. This hardcoded cookie password allows anyone with access to the codebase to decrypt user session data, posing a significant risk of session hijacking and data exposure. Although user passwords are hashed with bcrypt, this cookie vulnerability is critical. External network calls (search, stock, MCP) depend on the security of third-party services.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens750
Stars0
Forks0
Last Update2025-11-29

Tags

ChatbotLangGraphLLMPersistenceToolsRAGMulti-AgentStreamlitAuthentication