Back to Home
mostlyharmless-ai icon

watercooler-cloud

Verified Safe

by mostlyharmless-ai

Overview

Facilitates asynchronous collaboration and knowledge management for AI agents by managing markdown-based discussion threads and syncing them via Git, with advanced features for branch parity and knowledge graph generation.

Installation

Run Command
python -m watercooler_mcp

Environment Variables

  • WATERCOOLER_AGENT
  • WATERCOOLER_DIR
  • WATERCOOLER_CODE_REPO
  • WATERCOOLER_GIT_REPO
  • WATERCOOLER_THREADS_BASE
  • WATERCOOLER_THREADS_PATTERN
  • WATERCOOLER_THREADS_AUTO_PROVISION
  • WATERCOOLER_THREADS_CREATE_CMD
  • WATERCOOLER_GITHUB_TOKEN
  • WATERCOOLER_GIT_SSH_KEY
  • DEEPSEEK_API_KEY
  • EMBEDDING_API_KEY
  • LEANRAG_DIR
  • LLM_API_BASE
  • EMBEDDING_API_BASE
  • WATERCOOLER_MCP_TRANSPORT
  • WATERCOOLER_MCP_HOST
  • WATERCOOLER_MCP_PORT
  • WATERCOOLER_SYNC_LOG
  • WATERCOOLER_ASYNC_SYNC
  • WATERCOOLER_LOG_LEVEL
  • WATERCOOLER_CACHE_DIR

Security Notes

The `provisioning.py` module uses `subprocess.run(command, shell=True)` for `WATERCOOLER_THREADS_CREATE_CMD`. This is an opt-in feature where `command` is formatted from an environment variable. If `WATERCOOLER_THREADS_CREATE_CMD` is not securely configured by the deployer, it can lead to command injection. Other Git operations primarily use GitPython or direct `subprocess` calls with specific environment settings (`GIT_ASKPASS`, `GIT_SSH_COMMAND`) that attempt to mitigate interactive prompts and potential credential exposure, and `shlex.quote` is used where appropriate. Sensitive information is redacted from logs by `_redact_sensitive` function. Overall, careful environment configuration is crucial for security.

Similar Servers

Stats

Interest Score32
Security Score7
Cost ClassMedium
Avg Tokens1500
Stars2
Forks0
Last Update2025-12-14

Tags

AI agentscollaborationknowledge managementGit syncmarkdowncommunicationthread managementbranch parityknowledge graphMCP