Back to Home
youhavethepower2025 icon

enterprise-mcp-server

by youhavethepower2025

Overview

A production-ready FastAPI-based MCP server template designed to orchestrate multiple cloud ecosystems through a single API surface for AI agents, featuring multi-platform integration, authentication, and audit logging.

Installation

Run Command
docker-compose up -d

Environment Variables

  • APP_NAME
  • ENVIRONMENT
  • LOG_LEVEL
  • DB_HOST
  • DB_PORT
  • DB_NAME
  • DB_USER
  • DB_PASSWORD
  • GOHIGHLEVEL_BASE_URL
  • GOHIGHLEVEL_API_KEY
  • GOHIGHLEVEL_LOCATION_ID
  • QUICKBOOKS_BASE_URL
  • QUICKBOOKS_COMPANY_ID
  • QUICKBOOKS_ACCESS_TOKEN
  • QUICKBOOKS_DEFAULT_CUSTOMER_ID
  • FRESHBOOKS_BASE_URL
  • FRESHBOOKS_ACCOUNT_ID
  • FRESHBOOKS_ACCESS_TOKEN
  • GOOGLE_WORKSPACE_PROJECT_ID
  • GOOGLE_WORKSPACE_CREDENTIALS_PATH
  • AMAZON_REFRESH_TOKEN
  • AMAZON_CLIENT_ID
  • AMAZON_CLIENT_SECRET
  • CLOUDFLARE_ACCOUNT_ID
  • CLOUDFLARE_API_TOKEN
  • GODADDY_API_KEY
  • GODADDY_API_SECRET
  • DIGITALOCEAN_API_TOKEN
  • MCP_API_KEY
  • OAUTH_CLIENT_SECRET

Security Notes

CRITICAL SECURITY RISKS: 1. The `deploy_to_do.sh` script hardcodes a production `MCP_API_KEY` (`y4lEXubCO9-0Fjs4kVFg4A-NIseySW9piTerGBoNw_A`) directly into the `.env` file on deployment. 2. The `app/api/routes.py` file contains a hardcoded default `OAUTH_CLIENT_SECRET` (`medtainer-mcp-secret-2024`) for OAuth if the environment variable is not set. 3. MOST SEVERELY, several markdown documentation files (`docs/sops/CLOUD_DEPLOYMENT_OAUTH.md`, `POLISH_PLAN.md`, `SECURITY.md`) contain what appear to be *real, sensitive API keys and tokens* (e.g., GoHighLevel, DigitalOcean, Cloudflare API tokens, GoDaddy API key/secret, and JWT examples) in plain text, which are part of the repository's source code. 4. OAuth tokens stored in Redis via `app/api/routes.py` are not encrypted, contradicting claims in `SECURITY.md` about encryption at rest. 5. The deployment script uses `root` user for SSH (`root@24.199.118.227`), which is generally discouraged.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassMedium
Avg Tokens750
Stars0
Forks0
Last Update2025-11-22

Tags

Multi-platformAPI OrchestrationAI AgentsFastAPIDockerOAuth