Connection-Key-MCP-Server
by Heiko888
Overview
Acts as a central tool-server and orchestration layer for AI agents, providing capabilities for Human Design chart calculations, generating readings, performing partner matching, and interacting with n8n workflows for automation and user data management. It serves as a 'Single Source of Truth' for chart data and encapsulates complex business logic.
Installation
node mcp-gateway.jsEnvironment Variables
- OPENAI_API_KEY
- N8N_BASE_URL
- N8N_API_KEY
- N8N_PASSWORD
- MCP_SERVER_URL
- MCP_API_KEY
- CHATGPT_AGENT_URL
- READING_AGENT_URL
- NEXT_PUBLIC_SUPABASE_URL
- NEXT_PUBLIC_SUPABASE_ANON_KEY
- SUPABASE_SERVICE_ROLE_KEY
- AGENT_SECRET
- JWT_SECRET
- STRIPE_SECRET_KEY
- STRIPE_WEBHOOK_SECRET
- ADMIN_API_KEY
- AGENT_SYSTEM_TOKEN
- AGENT_HMAC_SECRET
- AGENT_ALLOWED_IPS
- KNOWLEDGE_PATH
- TEMPLATE_PATH
- LOGS_PATH
- LOG_LEVEL
- PORT
- NODE_ENV
- CORS_ORIGINS
- N8N_HOST
- N8N_PROTOCOL
- N8N_WEBHOOK_URL
Security Notes
The system presents several critical security concerns for a production environment. The extensive use of 'SUPABASE_SERVICE_ROLE_KEY' across server-side API routes (`SUPABASE_JS_TS_AUDIT.md`) completely bypasses Row Level Security (RLS) policies, granting superuser privileges to all authenticated requests and posing a significant data exposure risk. The `CORS_ORIGINS=*` setting in some configurations (`MCP Server - Detaillierte Code-Analyse`) allows requests from any domain, making it vulnerable to Cross-Site Request Forgery (CSRF) and other attacks. The presence of 'eval' or similar dangerous patterns was not explicitly found in the truncated code provided, but the widespread use of powerful API keys and broad access controls lowers the score. Environment variables are used, which is good, but their widespread use as `process.env` without clear separation of privileges (e.g., dedicated read-only keys for certain operations) and the RLS bypass are major weaknesses.
Similar Servers
mcp-n8n-builder
Programmatic creation and management of n8n workflows by AI assistants via the Model Context Protocol (MCP).
n8n-workflows
A fast, modern documentation system for N8N workflows, providing search, categorization, visualization, and a RESTful API for workflow management and analysis.
n8n-schema-generator
Provides auto-updating JSON schemas for n8n nodes and workflows, primarily for use by MCP servers and AI agents generating n8n workflows.
AI-agent-with-MCP-server-n8n-workflow
Integrate an AI chat agent with an MCP Server using n8n workflows to enable dynamic, tool-assisted responses for user queries.