Back to Home
golf-mcp icon

golf

by golf-mcp

Overview

A Python framework for building conversational AI servers (MCP servers) by defining tools, resources, and prompts as modular Python files, with integrated authentication, telemetry, and LLM interaction utilities.

Installation

Run Command
golf build dev && golf run

Environment Variables

  • HOST
  • PORT
  • GOLF_TELEMETRY
  • OTEL_TRACES_EXPORTER
  • OTEL_EXPORTER_OTLP_ENDPOINT
  • WEATHER_API_KEY
  • JWT_ISSUER_ENV_VAR
  • API_KEY_DEBUG

Security Notes

The example `calculator.py` tool (generated by default with `golf init`) uses `eval()` to evaluate mathematical expressions. While it includes a basic character whitelist, `eval()` is inherently dangerous and, if exposed to untrusted input (e.g., from an LLM generating malicious input or a direct API call), it poses a critical remote code execution vulnerability. For production environments, this tool should be removed or replaced with a safer expression parser. Other `exec()` and `subprocess` calls within the framework are for executing trusted local project files during the build/run process, which is generally acceptable. Telemetry uses a public API key and explicitly disables IP address collection.

Similar Servers

Stats

Interest Score99
Security Score4
Cost ClassMedium
Avg Tokens200
Stars807
Forks65
Last Update2026-01-17

Tags

PythonFrameworkMCP ServerLLMAIObservabilityAuthenticationCLI