Back to Home
deepset-ai icon

hayhooks

by deepset-ai

Overview

Deploy and serve Haystack Pipelines and Agents as REST APIs or MCP Tools, with OpenAI compatibility and Open WebUI integration, including support for RAG systems with file uploads and streaming.

Installation

Run Command
hayhooks run

Environment Variables

  • OPENAI_API_KEY
  • LOG
  • HAYHOOKS_HOST
  • HAYHOOKS_PORT
  • HAYHOOKS_ROOT_PATH
  • HAYHOOKS_PIPELINES_DIR
  • HAYHOOKS_ADDITIONAL_PYTHON_PATH
  • HAYHOOKS_USE_HTTPS
  • HAYHOOKS_DISABLE_SSL
  • HAYHOOKS_SHOW_TRACEBACKS
  • HAYHOOKS_STREAMING_COMPONENTS
  • HAYHOOKS_CORS_ALLOW_ORIGINS
  • HAYHOOKS_CORS_ALLOW_METHODS
  • HAYHOOKS_CORS_ALLOW_HEADERS
  • HAYHOOKS_CORS_ALLOW_CREDENTIALS
  • HAYHOOKS_CORS_ALLOW_ORIGIN_REGEX
  • HAYHOOKS_CORS_EXPOSE_HEADERS
  • HAYHOOKS_CORS_MAX_AGE
  • HAYHOOKS_MCP_HOST
  • HAYHOOKS_MCP_PORT

Security Notes

The default CORS settings (`HAYHOOKS_CORS_ALLOW_ORIGINS=["*"]`) allow all origins, which is a significant security risk if the server is exposed publicly without tighter controls. The RAG example's `docker-compose.yml` configures Elasticsearch with `xpack.security.enabled=false`, which is suitable only for local development and highly insecure for production environments. Sensitive API keys (e.g., OPENAI_API_KEY) are loaded from environment variables, which is a good practice, but careful management is required.

Similar Servers

Stats

Interest Score48
Security Score6
Cost ClassMedium
Avg Tokens750
Stars134
Forks33
Last Update2026-01-15

Tags

HaystackRAGLLMAPI GatewayMCPOpenAIStreamingDeploymentAI Agent