Back to Home
poly-mcp icon

Polymcp

Verified Safe

by poly-mcp

Overview

A comprehensive toolkit and agent framework for building Model Context Protocol (MCP) servers and orchestrating them with Large Language Models (LLMs) across Python and TypeScript environments.

Installation

Run Command
python polymcp/tools/summarize_tool.py

Environment Variables

  • OPENAI_API_KEY
  • ANTHROPIC_API_KEY
  • KIMI_API_KEY
  • DEEPSEEK_API_KEY
  • OLLAMA_BASE_URL
  • MCP_SECRET_KEY
  • MCP_ACCESS_TOKEN_EXPIRE
  • MCP_REFRESH_TOKEN_EXPIRE
  • DATABASE_URL
  • REDIS_URL
  • MCP_REQUIRE_HTTPS
  • POLYMCP_ENV
  • POLYMCP_LOG_LEVEL
  • MCP_SERVERS
  • AGENT_TYPE
  • AGENT_VERBOSE
  • AGENT_MAX_STEPS
  • EDITOR
  • PYTHONIOENCODING

Security Notes

The project implements sandboxing for LLM-generated code in both Python (using standard builtins with forbidden patterns) and TypeScript (using vm2 with forbidden patterns). This aims to prevent direct filesystem, network, or OS access. Production authentication (API Key, JWT) is robust with features like brute force protection, rate limiting, and HTTPS enforcement options. However, the Python sandbox explicitly includes `__builtins__` and relies on a blacklist, which, while a common pattern, carries inherent risks if the blacklist is incomplete or bypassed by sophisticated LLM outputs. Hardcoded development secrets exist in examples and `.env.template` files, requiring users to change them for production.

Similar Servers

Stats

Interest Score67
Security Score7
Cost ClassLow
Avg Tokens800
Stars56
Forks1
Last Update2025-12-03

Tags

LLM agentstool orchestrationMCP protocolFastAPITypeScriptbrowser automationstdio servers