Back to Home
kliushnichenko icon

jooby-mcp

Verified Safe

by kliushnichenko

Overview

Integrates the Java Model Context Protocol (MCP) SDK with Jooby to enable declarative, annotation-based registration and serving of tools, prompts, and resources as a standardized API.

Installation

Run Command
mvn clean install -DskipTests && java -jar jooby-mcp-example/target/jooby-mcp-example-1.0.0.jar

Environment Variables

  • MCP_DEFAULT_NAME
  • MCP_DEFAULT_VERSION
  • MCP_DEFAULT_TRANSPORT
  • MCP_DEFAULT_SSEENDPOINT
  • MCP_DEFAULT_MESSAGEENDPOINT
  • MCP_DEFAULT_MCPENDPOINT
  • MCP_DEFAULT_DISALLOWDELETE
  • MCP_DEFAULT_KEEPALIVEINTERVAL

Security Notes

The server relies on the official Java MCP SDK for core protocol handling and JSON serialization/deserialization. Method invocation logic is generated at build time using APT, which reduces runtime reflection risks. Input arguments are cast using `mcpJsonMapper.convertValue`, which could be a point of deserialization vulnerability if not robustly handled by the underlying JSON mapper, though the SDK likely accounts for this. Required arguments are validated. No obvious hardcoded secrets or direct arbitrary code execution from user input are observed in the provided code snippets. The main risk factor would reside within the security posture of the Java MCP SDK's JSON processing capabilities.

Similar Servers

Stats

Interest Score17
Security Score7
Cost ClassMedium
Avg Tokens300
Stars1
Forks0
Last Update2025-12-29

Tags

JavaJoobyMCPAPIServer