Back to Home
metatool-ai icon

metamcp

Verified Safe

by metatool-ai

Overview

MetaMCP acts as an MCP proxy to dynamically aggregate multiple MCP servers into a single unified MCP server endpoint, enabling middleware application and customized tool access for coding agents.

Installation

Run Command
docker compose up -d

Environment Variables

  • POSTGRES_HOST
  • POSTGRES_PORT
  • POSTGRES_USER
  • POSTGRES_PASSWORD
  • POSTGRES_DB
  • DATABASE_URL
  • APP_URL
  • NEXT_PUBLIC_APP_URL
  • BETTER_AUTH_SECRET
  • TRANSFORM_LOCALHOST_TO_DOCKER_INTERNAL
  • OIDC_CLIENT_ID
  • OIDC_CLIENT_SECRET
  • OIDC_DISCOVERY_URL
  • OIDC_AUTHORIZATION_URL
  • OIDC_PKCE
  • OIDC_SCOPES
  • OIDC_PROVIDER_ID
  • NODE_ENV
  • POSTGRES_CA_CERT

Security Notes

The default 'BETTER_AUTH_SECRET' in docker-compose files (both dev and prod) is a critical hardcoded secret that *must* be changed in production. The application implements good security practices including Helmet for HTTP headers, CORS configuration, robust OAuth 2.1 support with PKCE, API key authentication, and rate limiting. Spawning STDIO commands for MCP servers inherently carries risks; filtering of inherited environment variables helps mitigate this, but careful management of configured MCP servers is still essential.

Similar Servers

Stats

Interest Score82
Security Score7
Cost ClassMedium
Stars1920
Forks275
Last Update2025-12-23

Tags

MCP proxyAPI GatewayOrchestratorMiddlewareMulti-tenancySSOInternationalization