Back to Home
kiransth77 icon

aionmcp

by kiransth77

Overview

AionMCP serves as a model-independent tool server for AI agents and LLMs, dynamically importing OpenAPI, GraphQL, and AsyncAPI specifications to expose them as executable tools. It includes self-learning capabilities, autonomous documentation, and real-time monitoring.

Installation

Run Command
docker-compose up -d

Environment Variables

  • LOG_LEVEL
  • API_HOST
  • API_PORT
  • GRPC_HOST
  • GRPC_PORT
  • AIONMCP_HTTP_PORT
  • AIONMCP_GRPC_PORT
  • AIONMCP_LOG_LEVEL
  • AION_SESSION_TIMEOUT
  • AION_HEARTBEAT_INTERVAL
  • AIONMCP_DOCS_ENABLED
  • AIONMCP_DOCS_OUTPUT_DIR

Security Notes

CRITICAL: The core server's API endpoints (e.g., /api/v1/import-spec, /api/v1/tools/:name/invoke) appear to lack authentication and authorization by default. This allows any client to import specifications and execute tools, posing a significant security risk if exposed to untrusted networks. Future enhancements mention JWT-based agent authentication, but it's not currently implemented. The `import-spec` API also allows specifying local file paths or arbitrary URLs, which could lead to path traversal or Server-Side Request Forgery (SSRF) vulnerabilities if not properly sanitized. Running in a production or untrusted environment without an external API gateway, strong firewall rules, and robust authentication is highly insecure.

Similar Servers

Stats

Interest Score30
Security Score3
Cost ClassMedium
Avg Tokens2000
Stars1
Forks0
Last Update2025-11-30

Tags

MCPAI AgentsOpenAPIGraphQLAsyncAPIGoVS Code ExtensionSelf-learningDocumentation