Back to Home
AlpinAI icon

2ly

Verified Safe

by AlpinAI

Overview

Skilder is an infrastructure layer for AI agent tooling, providing a private tool registry and embedded runtimes for integrating with various agent frameworks and custom tools.

Installation

Run Command
docker compose up -d

Environment Variables

  • NODE_ENV
  • AUTOGEN_KEYS
  • CORS_ORIGINS
  • DGRAPH_URL
  • NATS_SERVERS
  • EXPOSED_NATS_SERVERS
  • EXPOSED_REMOTE_MCP
  • JWT_PRIVATE_KEY_PATH
  • JWT_PUBLIC_KEY_PATH
  • RUNTIME_NAME
  • ROOTS
  • SYSTEM_KEY
  • WORKSPACE_KEY
  • SKILL_KEY
  • REMOTE_PORT
  • ENCRYPTION_KEY
  • NATS_OPERATOR_SEED
  • FRONTEND_URL
  • LOG_LEVEL
  • VITE_GRAPHQL_HOST
  • VITE_GRAPHQL_HOST_SSL
  • OPENAI_API_KEY
  • GITHUB_TOKEN

Security Notes

The project demonstrates robust security practices for a distributed system, including the use of generated cryptographic keys for JWTs and NATS, strong password hashing (scrypt with peppering), and database-backed access validation for tokens (mitigating stale token issues). It features distributed rate limiting for API keys and OAuth initiation. GraphQL subscriptions are periodically re-validated for workspace access, which is a commendable measure against permission revocation during active sessions. While development configurations expose certain services (e.g., Dgraph, NATS Dashboard) and use broad CORS settings (origin: '*'), these are explicitly for development and should be hardened for production deployment.

Similar Servers

Stats

Interest Score62
Security Score9
Cost ClassMedium
Avg Tokens2000
Stars61
Forks1
Last Update2025-12-14

Tags

AI AgentsToolingInfrastructureMicroservicesDistributed SystemsModel Context Protocol (MCP)