Back to Home
workato-devs icon

dewy-resort

Verified Safe

by workato-devs

Overview

React hook for managing streaming chat with Amazon Bedrock via Server-Sent Events (SSE) for hotel management, leveraging Workato-orchestrated Model Context Protocol (MCP) tools for business operations.

Installation

Run Command
npm run dev

Environment Variables

  • AUTH_PROVIDER
  • APP_URL
  • COGNITO_USER_POOL_ID
  • COGNITO_CLIENT_ID
  • COGNITO_CLIENT_SECRET
  • COGNITO_REGION
  • COGNITO_IDENTITY_POOL_ID
  • AWS_REGION
  • BEDROCK_MODEL_ID
  • WORKATO_API_COLLECTION_URL
  • WORKATO_API_AUTH_TOKEN
  • MCP_HOTEL_SERVICES_URL
  • MCP_HOTEL_SERVICES_TOKEN
  • MCP_OPERATIONS_URL
  • MCP_OPERATIONS_TOKEN

Security Notes

The server uses `process.env` extensively for configuration, which is a good security practice. `child_process.spawn` is used to launch MCP servers, but the commands executed are defined in static configuration files (`config/mcp/*.json`), mitigating arbitrary command injection risk from direct user input. `JSON.parse` is used on incoming SSE data and MCP tool inputs, which could be a vector if not strictly validated by the LLM or underlying tool schemas. Hardcoded default manager email and names exist in `lib/mcp/hotel-db-server.ts` for demo purposes, which should be overridden in a production environment. Overall, good security hygiene is demonstrated, but the inherent complexity of LLM tool orchestration requires careful validation and authorization at multiple layers.

Similar Servers

Stats

Interest Score37
Security Score8
Cost ClassMedium
Avg Tokens2000
Stars3
Forks0
Last Update2025-12-10

Tags

Streaming ChatBedrock AIHotel ManagementWorkato IntegrationServer-Sent EventsModel Context Protocol