Back to Home
harness icon

mcp-server

Verified Safe

by harness

Overview

Provides dynamic, license-aware tool filtering and authorization for JSON-RPC requests to an MCP (Management Control Plane) server, integrating with various Harness platform services and AI/ML capabilities.

Installation

Run Command
go run ./cmd/harness-mcp-server

Environment Variables

  • HARNESS_ACCOUNT_ID
  • HARNESS_API_KEY
  • HARNESS_BASE_URL
  • HARNESS_LICENSE_BASE_URL
  • HARNESS_LICENSE_SECRET
  • LOG_SERVICE_URL
  • LOG_SERVICE_SECRET
  • LICENSE_CACHE_TTL
  • LICENSE_CACHE_CLEAN_INTERVAL
  • SERVER_PORT
  • DEBUG_LOGGING_ENABLED
  • INTERNAL_MODE_ENABLED

Security Notes

The server employs robust HTTP client practices with retry logic, explicit authentication via API keys or JWTs, and structured DTOs. The core tool filtering middleware is a crucial security control point for authorization. The `addQueryParams` function handles URL encoding specifically for Java backend compatibility, which requires careful implementation but isn't inherently insecure. OpenTelemetry tracing is implemented for observability. No 'eval' or obvious obfuscation/malicious patterns were found within the provided Go source code. Secrets are expected to be configured externally, not hardcoded.

Similar Servers

Stats

Interest Score40
Security Score9
Cost ClassHigh
Avg Tokens2000
Stars20
Forks14
Last Update2025-12-11

Tags

middlewarelicense managementJSON-RPCHTTPtool filteringHarness PlatformAI/ML integrationauthorization