Back to Home
mohan-ganesh icon

mono_mcp_client_server_adk

by mohan-ganesh

Overview

AI-powered conversational orchestration system that integrates with various microservices (billing, email) and Google Cloud AI services (Text-to-Speech, Speech-to-Text, Large Language Models, Google Cloud Storage, Optical Character Recognition) to provide dynamic, context-aware responses and execute domain-specific tasks for users.

Installation

Run Command
mvn spring-boot:run -pl mcp_orchestrator_client

Environment Variables

  • gcp.tts.voice.name
  • gcp.tts.speaking.rate
  • gcp.tts.pitch
  • speech.recognition.model
  • server.servlet.context-path
  • gcp.firestore.databaseId
  • gemini.model.name
  • mcp.server.urls
  • auth.token.info.url
  • auth.token.identity.domain
  • GOOGLE_CLOUD_PROJECT
  • GOOGLE_CLOUD_LOCATION
  • GOOGLE_GENAI_USE_VERTEXAI

Security Notes

Critical security risks include a global disablement of SSL/TLS certificate validation (`trustAllCertificates()` in `AdkClientBase.java` and `OcrCall.java`), explicitly noted as 'insecure for production'. This renders all network communication vulnerable to man-in-the-middle attacks. There is a hardcoded 'Bearer hello' authentication token used when loading tools from MCP servers (`AdkClientBase.java`), enabling unauthorized access to those tools. Furthermore, permissive CORS settings (`allowedOriginPatterns('*')` with `allowCredentials(true)` in `WebConfig.java` across multiple modules) open the door to Cross-Site Request Forgery (CSRF) and other attacks. These issues make the application highly unsafe for production environments.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassHigh
Avg Tokens750
Stars0
Forks0
Last Update2026-01-10

Tags

AI OrchestrationConversational AIGoogle ADKMicroservicesSpring BootFirestore