Back to Home
DosiBridge icon

agent-tool

by DosiBridge

Overview

A full-stack AI agent platform offering conversational AI with RAG, multi-LLM support, and extensible tooling via Model Context Protocol (MCP) servers.

Installation

Run Command
docker-compose up -d

Environment Variables

  • POSTGRES_USER
  • POSTGRES_PASSWORD
  • POSTGRES_DB
  • DATABASE_URL
  • CORS_ORIGINS
  • OPENAI_API_KEY
  • DEEPSEEK_KEY
  • FIRECRAWL_API_KEY
  • JWT_SECRET_KEY
  • MCP_APIKEY_ENCRYPTION_KEY
  • NEXT_PUBLIC_API_BASE_URL
  • ENVIRONMENT
  • AUTH0_DOMAIN
  • AUTH0_CLIENT_ID
  • AUTH0_AUDIENCE
  • GOOGLE_API_KEY
  • GROQ_API_KEY

Security Notes

The `docker-compose.yml` file contains hardcoded default passwords for PostgreSQL (`POSTGRES_PASSWORD: 1234`) and a default JWT secret (`JWT_SECRET_KEY: "your-secret-key-change-in-production-use-strong-random-key"`). While the project explicitly states these should be changed for production and provides a script (`generate_keys.py`) to do so, their presence as defaults is a critical security vulnerability for easy deployment. The system also allows users to configure and connect to external MCP servers, introducing a potential attack surface for SSRF or other network-based attacks if malicious URLs are provided, though `httpx` with timeouts is used for connection testing. The `eval` function is used for mathematical expression evaluation within restricted namespaces, which is a justified and controlled use.

Similar Servers

Stats

Interest Score33
Security Score6
Cost ClassMedium
Avg Tokens700
Stars2
Forks0
Last Update2025-12-12

Tags

AI AgentRAGLLMMCPChatbotFastAPINext.js