metorial-platform
Verified Safeby metorial
Overview
An open source integration platform for agentic AI, connecting AI models to external APIs, data sources, and tools.
Installation
docker compose -f deployment/compose/metorial.docker-compose.yml upEnvironment Variables
- DATABASE_URL
- REDIS_URL
- CODE_WORKSPACE_SERVICE_ADDRESS
- MCP_ENGINE_MANAGER_ADDRESS
- METORIAL_ID_WORKER_ID
- METORIAL_CONSUMER_TOKEN_SECRET
- ENVIRONMENT
- PUBLIC_URL
- USAGE_MONGO_URL
- SSO_MONGO_URL
- SENTRY_DSN
- AXIOM_TOKEN
- AXIOM_ORG_ID
- AXIOM_DATASET
- AXIOM_REGION
- GITHUB_APP_CLIENT_ID
- GITHUB_APP_CLIENT_SECRET
- GITHUB_APP_WEBHOOK_SECRET
- GITHUB_APP_PRIVATE_KEY
- EMAIL_FROM
- EMAIL_FROM_NAME
- EMAIL_SMTP_HOST
- EMAIL_SMTP_PORT
- EMAIL_SMTP_USERNAME
- EMAIL_SMTP_PASSWORD
- EMAIL_SES_REGION
- EMAIL_SES_KEY
- EMAIL_SES_SECRET
- PROVIDER_OAUTH_TOKEN_SECRET
- DENO_DEPLOY_TOKEN
- DENO_ORGANIZATION_ID
- DENO_RUNNER_ADDRESS
- AWS_REGION
- AWS_ACCESS_KEY_ID
- AWS_SECRET_ACCESS_KEY
- AWS_SESSION_TOKEN
- AWS_LAMBDA_S3_BUCKET
- MEILISEARCH_HOST
- MEILISEARCH_API_KEY
- MEILISEARCH_INDEX_PREFIX
- OPENSEARCH_HOST
- OPENSEARCH_USERNAME
- OPENSEARCH_PASSWORD
- OPENSEARCH_INDEX_PREFIX
- OPENSEARCH_PROTOCOL
- OPENSEARCH_AWS_MODE
- ALGOLIA_APP_ID
- ALGOLIA_ADMIN_KEY
- ALGOLIA_INDEX_PREFIX
- SSO_EXTERNAL_URL
- SSO_JACKSON_URL
- SSO_JACKSON_API_KEY
- SSO_JACKSON_AUDIENCE
Security Notes
The project demonstrates a strong commitment to security with a dedicated Go module for Server-Side Request Forgery (SSRF) protection, explicitly used in critical network-facing TypeScript modules like `provider-oauth` and `callbacks`. Sensitive configurations (DB URLs, API keys, secrets) are managed via environment variables and robust password hashing (Bun.password). Input validation is applied, and structured protocols like gRPC are used for inter-service communication. Markdown rendering uses `rehypeSanitize` for XSS. The system's nature, involving custom code execution and external integrations, inherently requires meticulous implementation to mitigate risks, but core architectural decisions appear sound.
Similar Servers
claude-flow
AI Agent Orchestration and Development Platform for Claude Code
klavis
Develop and deploy AI agents that interact with a wide array of web services (e.g., Gmail, YouTube, LinkedIn, Supabase, Salesforce, Kubernetes) through a standardized Model Context Protocol (MCP), often orchestrated by an intelligent routing layer like Strata.
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.
mcp-context-forge
Converts web content (HTML, PDF, DOCX, etc.) and local files from a URL into high-quality Markdown format. It supports multiple conversion engines, content optimization, batch processing, and image handling.