maas-webapp
Verified Safeby dx-tooling
Overview
Web platform for managing and orchestrating containerized MCP (Machine Control Protocol) instances, including Playwright and Linux command-line environments, providing access via subdomains and securing endpoints with Traefik ForwardAuth.
Installation
docker run -d -e INSTANCE_ID=my-instance maas-mcp-instance-linux-cmd-line-v1:latestEnvironment Variables
- APP_SECRET
- TRUSTED_PROXIES
- DATABASE_URL
- MAILER_DSN
- LOCK_DSN
- APP_ROOT_DOMAIN
- APP_WEBAPP_DOMAIN
- MAAS_MAINTENANCE
- INSTANCE_ID
- MCP_PORT
- INSTANCE_TYPE
- VNC_PASSWORD
- SCREEN_WIDTH
- SCREEN_HEIGHT
- COLOR_DEPTH
- VNC_PORT
- NOVNC_PORT
- METABASE_URL
- METABASE_API_KEY
- TRAEFIK_VERSION
- TRAEFIK_CONTAINER_NAME
- TRAEFIK_NETWORK_SELF
- TRAEFIK_NETWORK_OUTERMOST_ROUTER
- TRAEFIK_DASHBOARD_PORT
- TRAEFIK_HTTP_PORT
- TRAEFIK_HTTPS_PORT
- MCP_SUBDOMAIN_PATTERN
- VNC_SUBDOMAIN_PATTERN
- TRAEFIK_LOG_PATH
- TRAEFIK_USER_ID
- TRAEFIK_GROUP_ID
- DOCKER_HOST_ALIAS
- MCP_IMAGE_NAME
- MCP_CONTAINER_PREFIX
- MCP_NETWORK
- MCP_MEMORY_LIMIT
- MCP_RESTART_POLICY
- TRAEFIK_ENTRYPOINT
- ENABLE_FORWARDAUTH
- FORWARDAUTH_URL
Security Notes
The system utilizes robust security patterns including Traefik as an edge router for TLS termination and ForwardAuth middleware for bearer token validation. Secrets (VNC password, MCP bearer token) are dynamically generated and stored in the database. Docker commands are executed via a controlled wrapper script with `sudo -n`, limiting privileges and preventing arbitrary shell command injection. `hash_equals` is used for constant-time token comparison. While highly secure, the complexity of the Traefik and `sudoers` configurations requires careful setup to avoid misconfigurations.
Similar Servers
symfony-mcp-server
Enable Symfony applications to act as Model Context Protocol (MCP) servers, allowing them to expose AI tools, prompts, and resources to Large Language Models (LLMs) for building intelligent agents.
lex
Provides a UK legal research API with advanced search capabilities for legislation, caselaw, explanatory notes, and amendments, designed for integration with AI agents via the MCP protocol.
mcp-compose
Orchestrates multiple Model Context Protocol (MCP) servers with a unified API and a web-based management UI. It provides secure access via GitHub OAuth2, manages server lifecycles, enables tool invocation, and supports real-time monitoring and protocol translation.
mcp-server
A web-based Docker management platform for deploying, managing, and building custom AI tools (MCP servers) for integration with language models.