Back to Home
sagemcp icon

SageMCP

Verified Safe

by sagemcp

Overview

A scalable platform for hosting MCP servers with multi-tenant support, OAuth integration, and connector plugins for various services, deployed on Kubernetes.

Installation

Run Command
helm install sagemcp ./helm

Environment Variables

  • DEBUG
  • ENVIRONMENT
  • HOST
  • PORT
  • DATABASE_PROVIDER
  • DATABASE_URL
  • SUPABASE_URL
  • SUPABASE_ANON_KEY
  • SUPABASE_SERVICE_ROLE_KEY
  • SUPABASE_DATABASE_PASSWORD
  • SECRET_KEY
  • ACCESS_TOKEN_EXPIRE_MINUTES
  • REFRESH_TOKEN_EXPIRE_DAYS
  • GITHUB_CLIENT_ID
  • GITHUB_CLIENT_SECRET
  • GITLAB_CLIENT_ID
  • GITLAB_CLIENT_SECRET
  • GOOGLE_CLIENT_ID
  • GOOGLE_CLIENT_SECRET
  • GOOGLE_DOCS_SCOPES
  • NOTION_CLIENT_ID
  • NOTION_CLIENT_SECRET
  • ZOOM_CLIENT_ID
  • ZOOM_CLIENT_SECRET
  • JIRA_CLIENT_ID
  • JIRA_CLIENT_SECRET
  • BASE_URL
  • MCP_SERVER_TIMEOUT
  • MCP_MAX_CONNECTIONS_PER_TENANT
  • IMAGE_REGISTRY
  • REDIS_URL
  • PUBLIC_URL
  • GITHUB_DISCOVERY_TOKEN
  • ORCHESTRATOR

Security Notes

The platform dynamically builds Docker images and installs packages (NPM, PyPI) from remote sources (GitHub, NPM registry) for external MCP servers. This introduces a supply chain risk if a malicious MCP server is registered and installed. Commands for external MCP servers are executed via `subprocess_exec`. While runtime commands are likely admin-controlled, the integrity of external code sources is critical. The `SECRET_KEY` is auto-generated if not provided, ensuring it's always set. OAuth redirect URIs are handled with checks for localhost or `X-Forwarded-Host` headers. CORS `allow_origins` is set to `*` in development but should be restricted in production.

Similar Servers

Stats

Interest Score50
Security Score7
Cost ClassMedium
Stars25
Forks4
Last Update2025-12-01

Tags

Multi-tenantKubernetesOAuthConnectorsMCPFastAPI