mcp-assistant
Verified Safeby ashen-dusk
Overview
A web-based client for managing and interacting with remote Model Context Protocol (MCP) servers, enabling tool discovery, execution, and AI agent integration.
Installation
npm run devEnvironment Variables
- NEXT_PUBLIC_SUPABASE_URL
- NEXT_PUBLIC_SUPABASE_ANON_KEY
- NEXT_PUBLIC_APP_URL
- NEXTAUTH_URL
- NEXT_PUBLIC_DJANGO_API_URL
- NEXT_PUBLIC_BACKEND_URL
- NEXT_PUBLIC_LANGGRAPH_API_URL
- NEXT_PUBLIC_LANGGRAPH_ASSISTANT_ID
- REDIS_URL
- MCP_REGISTRY_API_KEY
- REGISTRY_API_BASE
Security Notes
Generally follows good security practices, utilizing environment variables for sensitive configurations and implementing explicit authentication checks for API routes. The OAuth 2.0 flow includes a `state` parameter to carry session information, and PKCE is used. `localStorage` is used for client-side non-sensitive caching. Potential minor concerns include a broad `hostname: '**'` for remote images in `next.config.ts`, which is standard for images but could hypothetically be a vector for XSS if combined with other vulnerabilities (mitigated by browser policies). Redis security depends on its external configuration.
Similar Servers
mcphub
An orchestration hub that aggregates, manages, and routes Model Context Protocol (MCP) servers and their tools, providing a centralized interface, user management, OAuth 2.0 authorization server capabilities, and AI-powered tool discovery and routing.
mcp-router
A desktop application that simplifies the management and aggregation of Model Context Protocol (MCP) servers.
mcpm.sh
MCPM is a command-line tool for managing Model Context Protocol (MCP) servers, enabling discovery, installation, execution, sharing, and integration with various MCP clients.
cli
The Smithery CLI is a developer tool for installing, managing, building, running, and deploying Model Context Protocol (MCP) servers and integrating them with various AI clients.