Back to Home
open-webui icon

mcpo

Verified Safe

by open-webui

Overview

Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.

Installation

Run Command
docker run -p 8000:8000 ghcr.io/open-webui/mcpo:main --api-key "top-secret" -- your_mcp_server_command

Environment Variables

  • LOG_LEVEL
  • CONNECTION_TIMEOUT

Security Notes

The core functionality involves executing user-provided commands for MCP servers. While this is by design, it introduces a significant arbitrary code execution risk if `mcpo` is deployed with high privileges and its configuration (CLI arguments or config file) can be controlled by untrusted entities. Strong authentication (`--api-key`) and network segmentation are crucial for secure deployment. Default host `0.0.0.0` and `cors_allow_origins='*'` are permissive but configurable. OAuth tokens, when using file storage, are stored in plaintext in `~/.mcpo/tokens/` and rely on OS-level file permissions for security, as noted in the documentation.

Similar Servers

Stats

Interest Score100
Security Score7
Cost ClassLow
Stars3742
Forks421
Last Update2025-12-08

Tags

OpenAPIHTTP ProxyLLM IntegrationToolingFastAPI