Back to Home
laravel icon

mcp

Verified Safe

by laravel

Overview

Facilitates rapid development of Model Context Protocol (MCP) servers for AI client interaction within Laravel applications.

Installation

Run Command
php artisan mcp:start {handle}

Environment Variables

  • MCP_REDIRECT_DOMAINS
  • APP_URL
  • APP_NAME
  • APP_DEBUG

Security Notes

The framework uses `eval()` strictly within test files for mocking, posing no runtime risk. The primary security concern lies in the default `mcp.redirect_domains` configuration (`*`) in `config/mcp.php`, which, if left unrestricted in production, allows any domain to register as an OAuth client. This could lead to open redirect vulnerabilities and unauthorized access. Developers must explicitly define allowed domains.

Similar Servers

Stats

Interest Score94
Security Score7
Cost ClassMedium
Avg Tokens500
Stars638
Forks64
Last Update2026-01-06

Tags

LaravelMCPAIServerProtocol