Back to Home
mohan-ganesh icon

mono_mcp_client_server_adk

by mohan-ganesh

Overview

An AI orchestration client that integrates Google's AI services (Gemini, TTS, STT) and custom Micro-Cloud Platform (MCP) tools to facilitate interactive conversations, including voice and document processing, for users seeking benefits or appointments.

Installation

Run Command
mvn clean compile exec:java -Dexec.mainClass="com.example.garvik.McpClientApplication"

Environment Variables

  • gcp.tts.voice.name
  • gcp.tts.speaking.rate
  • gcp.tts.pitch
  • speech.recognition.model
  • auth.token.info.url
  • auth.token.identity.domain
  • mcp.server.urls
  • gemini.model.name
  • GOOGLE_CLOUD_PROJECT
  • GOOGLE_CLOUD_LOCATION
  • GOOGLE_GENAI_USE_VERTEXAI
  • gcp.firestore.database-id

Security Notes

CRITICAL security risks identified. The application explicitly disables SSL certificate validation globally via `trustAllCertificates()` in `AdkClientBase.java` and `OcrCall.java`. This makes the application vulnerable to Man-in-the-Middle (MitM) attacks. A hardcoded authorization token ('Bearer hello') is used to load tools from MCP servers, which is a severe vulnerability if those servers are protected resources. Additionally, the Cloud Build configurations for deploying services like 'mcp-orchestrator-client', 'mcp-billing-server', and 'mcp-email-server' use `--allow-unauthenticated`, making these services publicly accessible without authentication. This directly conflicts with the presence of `AuthorizationHeaderFilter` in the billing and email servers, indicating a significant security misconfiguration at the deployment level. Sensitive information like credit card details could be exposed through insecure OCR calls. These issues are severe and make the application highly insecure for production use.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2025-12-10

Tags

AI AgentOrchestrationGoogle CloudChatbotMicroservices