Back to Home
mumong icon

mcpServer-holmesgpt

by mumong

Overview

Provides a unified gateway to expose various MCP tools (local Python scripts and external npm/uv packages) as SSE endpoints for AI agent integration.

Installation

Run Command
python start.py

Environment Variables

  • ES_URL
  • ES_USERNAME
  • ES_PASSWORD
  • ES_SSL_SKIP_VERIFY

Security Notes

CRITICAL: The `servers/test_server.py` module uses `eval(expr)` for a calculator function, which is an extremely dangerous practice and can lead to arbitrary code execution if the input is not perfectly sanitized. The RBAC configuration in `deploy/rbac.yaml` grants the `mcp-server-manager` service account `cluster-admin` privileges, giving it full administrative control over the entire Kubernetes cluster. A compromise of this pod (e.g., through the `eval` vulnerability or a malicious npm package) would lead to complete cluster takeover. Additionally, sensitive information like `ES_PASSWORD` is configured directly in ConfigMaps (`mcp_config.yaml` and `deploy/configmap.yaml`), which are not encrypted and expose credentials in plain text.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassMedium
Avg Tokens200
Stars0
Forks0
Last Update2025-12-18

Tags

MCPSSEToolingAgent IntegrationKubernetes