mcp-demo-server
Verified Safeby freemangh
Overview
Provides demo servers in Go and Python to demonstrate and test the Model Context Protocol (MCP) using various tools like echotest, timeserver, and fetch.
Installation
docker run -d -p 8080:8080 --name go-mcp mcp-server-demo-go:latestEnvironment Variables
- DOCKER_USERNAME
- DOCKER_PASSWORD
Security Notes
The 'fetch' tool, a core demo feature, allows the server to make HTTP/HTTPS requests to arbitrary URLs. This functionality, while intended for the demo, can pose a Server-Side Request Forgery (SSRF) risk if deployed without proper network isolation, as it could potentially access internal network resources. However, the code includes basic URL scheme validation and response size limits (up to 64KB) for safety. Container deployments leverage strong security contexts (runAsNonRoot, dropped capabilities, readOnlyRootFilesystem for Go) which significantly enhance security posture. No hardcoded secrets, obfuscation, or obvious malicious patterns were identified. For a demonstration project, the explicit 'fetch' functionality is acceptable given the context.
Similar Servers
toolhive-registry-server
The ToolHive Registry Server acts as a central metadata hub for enterprise Model Context Protocol (MCP) server governance and discovery.
yardstick
The server is designed for performance testing and benchmarking of Model Context Protocol (MCP) implementations across various transport types.
mcp-mock-server
Provides a mock server for the Model Context Protocol (MCP) to aid in the development and testing of MCP clients.
mcp-servers
Provides current weather conditions and forecasts from the Open-Meteo API for a given geographical location.