Back to Home
habibhassansehani icon

openai-sdk-knowledge-org

by habibhassansehani

Overview

Provides an AI-powered knowledge base and question-answering service for OpenAI APIs and SDKs, integrated as a Model Context Protocol (MCP) server.

Installation

Run Command
npm run dev

Environment Variables

  • VECTORIZE_PROD
  • VECTORIZE_DEV
  • DB
  • OPENAI_API_KEY
  • GITHUB_TOKEN
  • DISCOURSE_API_KEY
  • LOG_LEVEL
  • CLOUDFLARE_ACCOUNT_ID
  • CLOUDFLARE_AI_GATEWAY_ID
  • CLOUDFLARE_ADMIN_DASHBOARD_URL
  • GOOGLE_CLIENT_ID
  • GOOGLE_CLIENT_SECRET
  • GOOGLE_REDIRECT_URI
  • GOOGLE_JWT_SECRET
  • ADMIN_EMAILS
  • DISABLE_ADMIN_AUTH_FOR_LOCAL_DEV
  • ENABLE_WEB_SEARCH_FALLBACK
  • ENVIRONMENT
  • JOB_QUEUE

Security Notes

A critical security vulnerability exists due to a hardcoded default JWT secret (`DEFAULT_JWT_SECRET`) in `src/server/middleware/auth.ts`. If the `GOOGLE_JWT_SECRET` environment variable is not explicitly configured, this exposed secret could be used by an attacker to forge JWTs and gain unauthorized access to authenticated routes. Additionally, the OAuth client registration endpoint (`mcpOAuthRegisterHandler`) uses a 'system@mcp-server.local' email as a fallback, which might bypass proper user association for clients registered via this method. While API keys are externalized to environment variables, the inherent reliance on a publicly available code for sensitive default credentials is a significant risk.

Similar Servers

Stats

Interest Score33
Security Score3
Cost ClassMedium
Avg Tokens750
Stars3
Forks2
Last Update2025-12-11

Tags

Cloudflare WorkersRAGOpenAI AgentsKnowledge BaseAPI Gateway