-fenergo-mcp-server
by PaddyNoonan
Overview
Provides an AI-powered connector for Claude Desktop and ChatGPT to query Fenergo Nebula document management and customer journey data via a shared AWS AppRunner backend.
Installation
npm startEnvironment Variables
- FENERGO_API_TOKEN
- FENERGO_TENANT_ID
- PORT
- FENERGO_OAUTH_ENDPOINT
- FENERGO_CLIENT_ID
- FENERGO_CLIENT_SECRET
- FENERGO_OIDC_CLIENT_ID
- FENERGO_OIDC_CLIENT_SECRET
- FENERGO_OIDC_AUTHORITY
- FENERGO_OIDC_SCOPES
- APPRUNNER_URL
- FENERGO_API_BASE_URL
- FENERGO_TIMEOUT
- FENERGO_RETRIES
- FENERGO_SSO_TOKEN
Security Notes
The codebase contains hardcoded default sensitive values for `clientSecret` in `oidc-auth.js` and `oauth-auth.js`, which is a severe security vulnerability. Additionally, the `apprunner-backend.js` explicitly logs the full value of `FENERGO_OIDC_CLIENT_SECRET` (if set) during startup and diagnostics, which exposes credentials in application logs. The in-memory session store is not suitable for production and could lead to session loss or vulnerability if not properly managed in a distributed environment. While HTTPS and secure protocol settings are used, these critical issues significantly compromise the security posture.
Similar Servers
mcp-server-salesforce
Enable natural language interactions and automation with Salesforce data and metadata for AI models.
cloudrun-claude-code
A production-ready Cloud Run service that executes Claude Code tasks in isolated jobs, enabling AI-driven code analysis, development, and automation with secure credential handling and post-execution actions.
mcp-raganything
Provides a FastAPI REST API and MCP server for Retrieval Augmented Generation (RAG) capabilities, integrating with the RAG-Anything and LightRAG libraries for multi-modal document processing and knowledge graph operations.
mcp2skill-tools
Enables AI coding assistants like Claude Code to interact with various Model Context Protocol (MCP) servers and their tools via a unified REST API gateway.