Back to Home
ShivamPansuriya icon

MCP-server-Python

by ShivamPansuriya

Overview

A modular, scalable system for resolving natural language entity names to IDs using Elasticsearch fuzzy matching with disambiguation support, acting as a backend for AI agents.

Installation

Run Command
python mcp_server.py

Environment Variables

  • ES_HOST
  • ES_PORT
  • MOTADATA_SERVER_URL
  • MOTADATA_ACCESS_TOKEN
  • MOTADATA_CLIENT_ID
  • MOTADATA_CLIENT_SECRET

Security Notes

Critical vulnerability: `api_client.py` disables SSL certificate verification (`verify=False`) for `httpx.AsyncClient`, making the system vulnerable to Man-in-the-Middle (MITM) attacks. Hardcoded secret: `websocket_client.py` contains a hardcoded `client_secret` ("IZqQXkqA1tGLIBRpYs"). Active hardcoded test token: `dynamic_tool_middleware.py` uses a hardcoded authentication token for all requests (`on_list_tools`, `on_call_tool`), bypassing normal authentication, which is a major security flaw even if intended for testing. Exposure risk: Elasticsearch and WebSocket server credentials/endpoints are used; their security depends on the external infrastructure.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassMedium
Avg Tokens50
Stars0
Forks0
Last Update2025-12-01

Tags

Slot ResolutionEntity MappingElasticsearchAI Agent BackendAPI Gateway