Back to Home
Fridemn icon

Automata-mcp-server

by Fridemn

Overview

A plugin-based FastAPI server implementing the Model Context Protocol (MCP) for dynamic integration and management of AI tools, featuring hot reloading and API key authentication.

Installation

Run Command
python main.py

Environment Variables

  • HOST
  • PORT
  • AUTOMATA_ACCESS_TOKEN
  • OPENAI_API_KEY
  • OPENAI_MODEL
  • ALLOWED_ORIGINS
  • ALLOWED_METHODS

Security Notes

The real-time log viewer at `/api/logs` and `/api/logs/ws` is publicly accessible without authentication, posing a critical information disclosure risk as server logs can contain sensitive operational details. The API is unauthenticated by default if the `AUTOMATA_ACCESS_TOKEN` environment variable is not set, allowing unauthorized access to server tools. The server dynamically installs Python dependencies specified in tool `config.yaml` files; while package names are validated, this process involves executing external commands and could be a vector for supply chain attacks if tool configurations are compromised. The CORS configuration can be set to allow all origins (`*`), which is explicitly warned against as a security risk, although this is configurable by the user.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassMedium
Avg Tokens2000
Stars0
Forks2
Last Update2025-12-16

Tags

FastAPIPlugin ArchitectureMCPAI ToolsHot Reload