Back to Home
chrishayuk icon

chuk-mcp-server

by chrishayuk

Overview

A framework for building high-performance, modular, zero-configuration Model Context Protocol (MCP) servers, capable of hosting AI agent tools, resources, and prompts across local, containerized, and diverse cloud environments.

Installation

Run Command
uv run python examples/zero_config_example.py

Environment Variables

  • GITHUB_TOKEN
  • MCP_SERVER_NAME
  • MCP_SERVER_VERSION
  • MCP_TRANSPORT
  • MCP_LOG_LEVEL
  • MCP_STDIO
  • USE_STDIO
  • GOOGLE_CLIENT_ID
  • GOOGLE_CLIENT_SECRET
  • GOOGLE_REDIRECT_URI
  • OAUTH_SERVER_URL
  • OAUTH_AUTH_CODE_TTL
  • OAUTH_ACCESS_TOKEN_TTL
  • OAUTH_REFRESH_TOKEN_TTL
  • OAUTH_CLIENT_REGISTRATION_TTL
  • OAUTH_EXTERNAL_TOKEN_TTL
  • OAUTH_PENDING_AUTH_TTL
  • PORT
  • DEBUG
  • LOG_LEVEL

Security Notes

CRITICAL VULNERABILITY: The default example server provided in `cli.py` (and scaffolded projects) includes a `calculate` tool that uses `eval(expression)`. While there's an attempt to filter allowed characters, `eval` is notoriously difficult to secure against arbitrary code execution, making this a significant remote code execution vulnerability if exposed. NETWORK RISKS: The server defaults to binding on `0.0.0.0` in containerized/cloud environments, which is necessary for platform routing but exposes the server to all network interfaces. This is mitigated by typical cloud infrastructure (load balancers), but direct exposure should be avoided. GOOD PRACTICES: OAuth implementation uses PKCE. Configuration loads environment variables, preventing hardcoded secrets. Relies on `chuk-tool-processor` for robust and resilient MCP handling. Uses `orjson` for fast and potentially safer JSON serialization/deserialization.

Similar Servers

Stats

Interest Score37
Security Score4
Cost ClassLow
Avg Tokens150
Stars9
Forks5
Last Update2026-01-16

Tags

MCP ServerAI ToolingAgent FrameworkMicroservicesCloud NativePythonAsynchronousAPI GatewayModular DesignZero ConfigPerformance Optimized