Back to Home
shinzo-labs icon

shinzo

by shinzo-labs

Overview

A complete observability platform for AI Agents and MCP servers, enabling ingestion and analysis of OpenTelemetry-compatible data.

Installation

Run Command
docker-compose up --build -d

Environment Variables

  • DATABASE_URL
  • BACKEND_PORT
  • JWT_SECRET
  • ENCRYPTION_KEY
  • MAILGUN_API_KEY
  • MAILGUN_DOMAIN
  • FROM_EMAIL
  • FROM_NAME
  • FRONTEND_URL
  • LOG_LEVEL
  • MAX_PAYLOAD_SIZE
  • RATE_LIMIT_MAX
  • RATE_LIMIT_WINDOW

Security Notes

Critical security vulnerabilities exist due to hardcoded default secrets in `backend/src/config.ts` for `JWT_SECRET` and `ENCRYPTION_KEY`. These values are explicitly warned about (`default-secret-change-in-production`, `dev-fallback-key-change-in-prod`) but are present in the codebase. Deploying with these defaults would compromise user authentication and encrypted provider API keys. While SQL queries use parameterized binding to prevent injection, the key management is a significant flaw. `MAILGUN_API_KEY` also has a default empty string, which would lead to email failures if not configured.

Similar Servers

Stats

Interest Score32
Security Score3
Cost ClassMedium
Avg Tokens1000
Stars2
Forks1
Last Update2025-12-05

Tags

observabilityai-agentsopentelemetryanalyticsmcp