Back to Home
neurondb icon

neurondb

by neurondb

Overview

A Model Context Protocol (MCP) server designed to expose advanced AI and database functionalities (vector search, ML, RAG, PostgreSQL admin) as tools via a standardized JSON-RPC protocol over STDIN/STDOUT, typically serving as a backend for AI agents or desktop applications.

Installation

Run Command
docker build -f dockers/neuronmcp/Dockerfile -t neurondb-mcp:latest . && docker run --name neurondb-mcp -e NEURONDB_HOST="host.docker.internal" -e NEURONDB_PORT="5432" -e NEURONDB_DATABASE="neurondb" -e NEURONDB_USER="neurondb" -e NEURONDB_PASSWORD="your_strong_password" neurondb-mcp:latest

Environment Variables

  • NEURONDB_HOST
  • NEURONDB_PORT
  • NEURONDB_DATABASE
  • NEURONDB_USER
  • NEURONDB_PASSWORD
  • NEURONDB_CONNECTION_STRING
  • NEURONDB_MCP_CONFIG
  • NEURONDB_LOG_LEVEL
  • NEURONDB_LOG_FORMAT
  • NEURONDB_LOG_OUTPUT
  • NEURONDB_ENABLE_GPU
  • NEURONDB_LLM_API_KEY
  • ADMIN_PASSWORD
  • NEURONAGENT_ENDPOINT
  • NEURONAGENT_API_KEY

Security Notes

The system includes robust security features such as XSS/CSRF protection, rate limiting, and SQL injection prevention (for standard queries) within the NeuronDesktop API wrapper. Critical operations (e.g., full SQL execution) require explicit admin privileges and configuration enablement. However, there are notable risks: 1. Hardcoded Default API Keys: A default HuggingFace API key (`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`) is present in `docker-compose.yml`, which is a significant vulnerability. 2. Insecure Default Passwords: The PostgreSQL password defaults to `neurondb` in `docker-compose.yml`, explicitly marked as a 'SECURITY WARNING' for development only. 3. Temporary Password Logging: During NeuronDesktop API bootstrap, if `ADMIN_PASSWORD` is not set, a temporary password is generated and logged to stderr, potentially exposing credentials in logs.

Similar Servers

Stats

Interest Score55
Security Score6
Cost ClassHigh
Avg Tokens750
Stars30
Forks1
Last Update2026-01-19

Tags

AIMachine LearningVector DatabaseRAGLLMPostgreSQLToolingAgent ProtocolJSON-RPC