Back to Home
Toyoclara233 icon

registry

Verified Safe

by Toyoclara233

Overview

The MCP Registry is a community-driven metadata repository for Model Context Protocol (MCP) servers, facilitating their discovery, publishing, and management.

Installation

Run Command
go run ./cmd/registry

Environment Variables

  • MCP_REGISTRY_DATABASE_URL
  • MCP_REGISTRY_ENVIRONMENT
  • MCP_REGISTRY_GITHUB_CLIENT_ID
  • MCP_REGISTRY_GITHUB_CLIENT_SECRET
  • MCP_REGISTRY_JWT_PRIVATE_KEY
  • MCP_REGISTRY_ENABLE_ANONYMOUS_AUTH
  • MCP_REGISTRY_SEED_FROM
  • MCP_REGISTRY_OIDC_ENABLED
  • MCP_REGISTRY_OIDC_ISSUER
  • MCP_REGISTRY_OIDC_CLIENT_ID
  • MCP_REGISTRY_OIDC_EXTRA_CLAIMS
  • MCP_REGISTRY_OIDC_EDIT_PERMISSIONS
  • MCP_REGISTRY_OIDC_PUBLISH_PERMISSIONS
  • MCP_REGISTRY_ENABLE_REGISTRY_VALIDATION

Security Notes

The project demonstrates strong security practices for production deployments, utilizing Pulumi secrets for sensitive configurations (GitHub client secrets, JWT private keys) and OIDC for admin authentication. Local development uses hardcoded, non-sensitive defaults, which is acceptable. The `server.json` schema explicitly warns about command injection risks for clients, indicating proactive security awareness. Shell scripts for administrative tasks correctly handle environment variables for tokens, preventing hardcoding. Overall, the architecture minimizes direct exposure of secrets in code and relies on established secure deployment and authentication mechanisms.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassLow
Stars0
Forks0
Last Update2026-01-19

Tags

RegistryAPIMetadataMCPKubernetesPulumiGoPostgreSQLDevOps