Back to Home
rh-ai-quickstart icon

llama-stack-mcp-server

by rh-ai-quickstart

Overview

Provides a comprehensive REST API for HR operations, designed to be integrated as a tool for AI agents via the Model Context Protocol (MCP).

Installation

Run Command
npm start

Environment Variables

  • PORT
  • NODE_ENV
  • ALLOWED_ORIGINS
  • ENABLE_SWAGGER
  • ENABLE_RATE_LIMITING
  • HR_API_BASE_URL
  • HR_API_KEY

Security Notes

The custom MCP server (Python) and HR Enterprise API (Node.js) rely on an `X-API-Key` for authentication. Critically, the `custom-mcp-server/server.py` hardcodes `HR_API_KEY="hr-api-default-key"` as a default, which is a major security vulnerability for any non-trivial use. The HR API also defaults `ALLOWED_ORIGINS=*` for CORS, insecure for production. Swagger UI is exposed by default, potentially leaking API structure if not secured. The `/health` endpoint in the custom MCP server reveals the internal `HR_API_BASE_URL`.

Similar Servers

Stats

Interest Score28
Security Score3
Cost ClassLow
Avg Tokens50
Stars2
Forks6
Last Update2025-11-19

Tags

HRAPILlama StackEnterpriseNode.js