Back to Home
Toyoclara233 icon

registry

Verified Safe

by Toyoclara233

Overview

A community-driven metadata registry for Model Context Protocol (MCP) servers, facilitating discovery, publication, and management of server information.

Installation

Run Command
docker compose up

Environment Variables

  • MCP_REGISTRY_DATABASE_URL
  • MCP_REGISTRY_GITHUB_CLIENT_ID
  • MCP_REGISTRY_GITHUB_CLIENT_SECRET
  • MCP_REGISTRY_JWT_PRIVATE_KEY
  • MCP_REGISTRY_ENVIRONMENT
  • MCP_REGISTRY_OIDC_ENABLED
  • MCP_REGISTRY_OIDC_ISSUER
  • MCP_REGISTRY_OIDC_CLIENT_ID
  • MCP_REGISTRY_OIDC_EXTRA_CLAIMS
  • MCP_REGISTRY_OIDC_EDIT_PERMISSIONS
  • MCP_REGISTRY_OIDC_PUBLISH_PERMISSIONS

Security Notes

Local development configurations in `docker-compose.yml` and `Pulumi.local.yaml` contain hardcoded default secrets (e.g., GitHub client secrets, JWT private key, PostgreSQL password). While intended for development, these pose a risk if mistakenly used in production. Production deployments (GCP) leverage Pulumi's secrets management, which is a more secure approach. The `server.schema.json` includes a warning about potential command injection risks if clients improperly execute arguments defined in the metadata, highlighting a client-side risk rather than a direct server vulnerability.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens20000
Stars0
Forks0
Last Update2025-12-06

Tags

APIKubernetesGoPostgreSQLSchema ValidationDevOpsAuthentication