MCP_Catalog

The system runs FastAPI with Ollama, Brave Search MCP (ephemeral Docker containers), and MongoDB MCP (long-running Docker container). Resource limits (memory, CPU, PIDs) are applied to spawned MCP containers, and MongoDB operations are explicitly restricted to read-only via a blacklist. CORS is configured for localhost, which is appropriate for development. CRITICAL NOTE: The `docker-compose.yml` mounts `/var/run/docker.sock` into the backend container, granting it root access to the Docker daemon. While this is a common pattern for local developer tools that manage other containers, it is a significant security risk in production or multi-tenant environments. The code attempts to mitigate risks by hardening spawned containers with limits and labels for orphan detection, but the underlying exposure of the Docker socket remains. For its stated 'local personal use' context, these mitigations are reasonable, but for broader deployment, this would need re-evaluation.