Back to Home
sasharm8-te icon

am-mcp-server

by sasharm8-te

Overview

Provides a Model Context Protocol (MCP) interface for AI assistants to manage user accounts, organizations, synchronization, and monitor system health.

Installation

Run Command
docker run --rm -i --network=host -e SPRING_PROFILES_ACTIVE=local accounting/am-mcp-server:latest --stdio

Environment Variables

  • SPRING_PROFILES_ACTIVE
  • database.url
  • database.username
  • database.password
  • external-services.cui-integration-service.base-url
  • external-services.account-management.grpc-endpoint
  • external-services.account-management.grpc-use-tls
  • MCP_API_KEY
  • ALLOWED_ORIGINS

Security Notes

Hardcoded database credentials (username and password) are present in `src/main/resources/application.yml` which is a critical security flaw if checked into version control or deployed without overriding. The default CORS policy (`ALLOWED_ORIGINS: '*'`) is overly permissive for production. API key authentication (`MCP_API_KEY`) is configurable but not explicitly enforced in the provided controller code, potentially leaving endpoints unprotected. Direct parsing of user input (e.g., `uid`, `org_id`) to numeric types without robust upstream validation could be susceptible to malformed input, though `NamedParameterJdbcTemplate` helps mitigate SQL injection.

Similar Servers

Stats

Interest Score0
Security Score5
Cost ClassMedium
Avg Tokens1000
Stars0
Forks0
Last Update2025-11-24

Tags

Account ManagementMCPSpring BootJavaDockerAI Integration