Back to Home
dynastynodes icon

synapseflow

Verified Safe

by dynastynodes

Overview

The SynapseFlow MCP Server facilitates real-time communication and orchestration between clients (web app, CLI) and a multi-agent AI backend for cross-domain research discovery using the Model Context Protocol (MCP).

Installation

Run Command
cd synapseflow/mcp-server && npm run dev

Environment Variables

  • MCP_SERVER_PORT
  • HOST
  • LOG_LEVEL
  • CORS_ORIGINS
  • BACKEND_URL
  • MCP_SSE_ENABLED
  • MCP_STDIO_ENABLED
  • HUGGINGFACE_API_KEY

Security Notes

Network Risks: The SSE server endpoint `/stream` explicitly sets `Access-Control-Allow-Origin: *` in `sse-server.ts`. This allows any domain to establish an SSE connection, posing a significant CORS vulnerability if sensitive data is streamed or if it allows arbitrary requests to trigger actions. It should ideally be restricted to `config.corsOrigins`. The server also binds to `0.0.0.0` by default, making it publicly accessible if exposed without proper firewall rules. Hardcoded Secrets: No direct hardcoded secrets found within the MCP server's source code. `HUGGINGFACE_API_KEY` is an environmental variable for the *backend* service, not the MCP server itself. Eval/Obfuscation: No use of `eval` or code obfuscation observed.

Similar Servers

Stats

Interest Score30
Security Score6
Cost ClassHigh
Avg Tokens10000
Stars1
Forks0
Last Update2026-01-19

Tags

AIResearchMulti-AgentSelf-LearningMCP