Back to Home
ZHLOVEYY icon

mymcp_backend

by ZHLOVEYY

Overview

A Go backend server for managing and exposing MCP (Multi-Agent Communication Protocol) services, including dynamic registration and execution of user-defined Go functions as MCP tools.

Installation

Run Command
go run main.go

Security Notes

The server allows dynamic execution of user-provided Go source code via the Yaegi interpreter in the `/api/functomcp/codetrial` and `/api/functomcp/register` endpoints. While Yaegi is designed for safe Go interpretation, executing arbitrary user code from external sources (even with AST manipulation and import control) presents significant security risks, including potential interpreter vulnerabilities, resource exhaustion attacks, or unintended side effects if the sandboxing mechanism can be bypassed. Additionally, `service/pkg/mid/mcpAuth.go` contains a hardcoded `Authorization: 'xxxx'` value which, if used in a production setup, could lead to severe authentication bypasses for SSE connections.

Similar Servers

Stats

Interest Score26
Security Score1
Cost ClassMedium
Avg Tokens500
Stars1
Forks0
Last Update2025-11-19

Tags

GoBackendMCPDynamic ToolsAPI