Back to Home
GavinZha0 icon

ChatPie

by GavinZha0

Overview

ChatPie is a modern AI-driven chat platform facilitating seamless human-AI collaboration through advanced chat capabilities, multi-model support, and a workflow builder.

Installation

Run Command
docker compose up -d

Environment Variables

  • BETTER_AUTH_SECRET
  • BETTER_AUTH_URL
  • POSTGRES_URL
  • POSTGRES_HOST
  • POSTGRES_USER
  • POSTGRES_PASSWORD
  • POSTGRES_DB
  • POSTGRES_PORT
  • OPENAI_API_KEY
  • GOOGLE_GENERATIVE_AI_API_KEY
  • EXA_API_KEY
  • REDIS_URL
  • MCP_MAX_TOTAL_TIMEOUT
  • NEXT_PUBLIC_PASSWORD_REGEX_PATTERN
  • NEXT_PUBLIC_PASSWORD_REQUIREMENTS_TEXT

Security Notes

The project uses robust input validation (Zod, JSON Schema) and authentication/authorization (`better-auth`). API keys are securely managed on the backend. The main security concerns arise from core features: 1. Arbitrary HTTP Requests (`httpFetchTool`, `HttpNodeExecutor`): This allows the AI (and potentially users via prompt injection) to make arbitrary HTTP requests, posing a significant SSRF risk if not strictly controlled at the prompt engineering and deployment level. 2. Client-Side Code Execution (`jsExecutionTool`, `pythonExecutionTool`): While stated to be client-side and includes sandboxing attempts, any client-side sandbox can theoretically be bypassed. The risk to the server is indirect (e.g., malicious code generated by AI for client execution). Overall, good foundational security but inherent risks in functionality require extreme diligence in AI safety and prompt hardening.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2025-12-06

Tags

AI ChatbotLLMWorkflow AutomationTool UseHuman-AI Collaboration