Back to Home
saidsurucu icon

yargi-mcp

by saidsurucu

Overview

Provides LLM applications programmatic access to various Turkish legal sources (Court of Cassation, Council of State, Constitutional Court, etc.) for legal research, decision searching, and document retrieval.

Installation

Run Command
uvx yargi-mcp

Environment Variables

  • CLERK_DOMAIN
  • CLERK_PUBLISHABLE_KEY
  • CLERK_SECRET_KEY
  • BASE_URL
  • JWT_SECRET_KEY
  • ENABLE_AUTH
  • TEMP
  • UPSTASH_REDIS_REST_URL
  • UPSTASH_REDIS_REST_TOKEN
  • OAUTH_CODE_TTL
  • SESSION_TTL
  • BRAVE_API_TOKEN
  • STRIPE_SECRET
  • STRIPE_WEBHOOK_SECRET
  • HOST
  • PORT
  • LOG_LEVEL
  • ALLOWED_ORIGINS
  • API_TOKEN
  • OPENROUTER_API_KEY

Security Notes

CRITICAL RISK: Multiple API clients (Yargıtay, Danıştay, Emsal, Uyuşmazlık, KİK) explicitly disable SSL certificate verification (`verify=False` in httpx.AsyncClient or `ssl.CERT_NONE`, `check_hostname=False` in SSL context). This makes the application highly vulnerable to Man-in-the-Middle attacks, allowing attackers to intercept or alter communication with external legal databases. Additionally, a fallback Brave API token is hardcoded in the KVKK client, and a 'DOCUMENT_ID_ENCRYPTION_KEY' is hardcoded in the KİK v2 client for URL construction, which, if intended for security, represents a secret exposure. OAuth session and token storage can default to a system's temporary directory if Redis is not configured, posing a risk.

Similar Servers

Stats

Interest Score98
Security Score3
Cost ClassLow
Avg Tokens320
Stars562
Forks94
Last Update2025-12-13

Tags

Turkish LawLegal ResearchMCP ServerLLM ToolsAI IntegrationFastMCP