mcp-ui-webmcp
Verified Safeby WebMCP-org
Overview
Facilitates bidirectional AI interaction with embedded web applications, enabling dynamic tool registration and rich UI display within AI assistants.
Installation
pnpm devEnvironment Variables
- APP_URL
- ANTHROPIC_API_KEY
- ALLOWED_ORIGINS
- SENTRY_DSN
- ENVIRONMENT
Security Notes
Development configurations (CORS: '*', allowedOrigins: ['*']) are explicitly identified as needing to be tightened for production in `ARCHITECTURE.md` and `README.md`. No hardcoded secrets were found in the provided code; sensitive information is expected to be managed via Cloudflare secrets or gitignored `.vars.local` files. The `remoteDom` UI resource type allows execution of JavaScript provided by the server within the client iframe, which is a powerful feature requiring careful server-side control over content. `rawHtml` is mentioned as 'sandboxed for security', implying sanitization handled by the underlying MCP UI client library.
Similar Servers
core
An extensible IDE framework for building web-based, desktop (Electron), and AI-native development environments, providing core UI components like message notifications and modal dialogues.
AskUserQuestionPlus
Facilitates asking structured questions to users via a web interface, collecting their input for AI models interacting through the Model Context Protocol (MCP).
skillz
Skillz enables AI agents to dynamically build, manage, and execute custom tools at runtime using WebAssembly and scripts, with features like persistent memory, Docker service orchestration, and external MCP server integration.
Crawleo-MCP
Provides AI assistants with real-time web search and crawling capabilities via the Model Context Protocol (MCP).