Back to Home
Meritocra icon

coroot-mcp

Verified Safe

by Meritocra

Overview

Turns Coroot observability stack into LLM-callable tools for root-cause analysis, enabling AI assistants to triage incidents and generate summaries.

Installation

Run Command
docker run --rm -p 8080:8080 -e OPENAI_API_KEY=YOUR_OPENAI_API_KEY -e COROOT_API_URL=YOUR_COROOT_API_URL -e COROOT_DEFAULT_PROJECT_ID=YOUR_COROOT_PROJECT_ID -e MCP_AUTH_TOKEN=YOUR_OPTIONAL_MCP_AUTH_TOKEN coroot-mcp:latest

Environment Variables

  • OPENAI_API_KEY
  • OPENAI_MODEL
  • COROOT_API_URL
  • COROOT_API_KEY
  • COROOT_DEFAULT_PROJECT_ID
  • MCP_AUTH_TOKEN

Security Notes

The application handles JSON-RPC requests for tool calls, using predefined tool classes and structured JSON arguments, which is a safe pattern. It relies on environment variables for API keys (Coroot, OpenAI) and API URLs, preventing hardcoded secrets. An optional `MCP_AUTH_TOKEN` provides bearer token authentication for the `/mcp` endpoint; if not configured, the endpoint is unprotected, which could be a risk if exposed publicly. HTTP client includes timeouts. No direct 'eval' or malicious patterns were found in the Java source code.

Similar Servers

Stats

Interest Score37
Security Score9
Cost ClassHigh
Avg Tokens2500
Stars5
Forks0
Last Update2025-11-19

Tags

CorootObservabilityLLM ToolsRoot Cause AnalysisSpring Boot