Advanced MCP Server

An implementation of the Model Context Protocol (MCP) server that provides AI coding agents with a secure, flexible, and extensible environment for executing coding tasks.

Features

• Session Management

• Resource Management

• Sandboxed Tool Execution

• Policy Engine

• Multi-Agent Collaboration

• Extensible Tooling

• Rate Limiting

• Custom Tools (Code Analysis, Testing, Documentation)

Related MCP server: Code Executor MCP Server

Getting Started

Prerequisites

• Node.js 18+

• Docker (optional, for enhanced sandboxing)

• Docker Compose (optional)

Installation

1. Clone the repository

2. Install dependencies:

   npm install

Development

To start the development server:

npm run dev

To start with Docker:

docker-compose up

Building

To build the TypeScript code:

npm run build

Testing

To run tests:

npm test

To run tests with coverage:

npm run test:coverage

API Documentation

Detailed API documentation is available in the following formats:

• OpenAPI Specification

• gRPC Protocol Definition

• API Documentation

• Qwen CLI Integration Guide

Using with Qwen Code

The MCP Server is designed to work seamlessly with Qwen Code. After starting the server:

1. Start the server:

   npm run dev

2. Configure Qwen Code to use the MCP server by creating a .qwen/settings.json file:

   {
     "mcpServers": {
       "local-fullstack-mcp": {
         "name": "Local Fullstack MCP Server",
         "transport": "http",
         "url": "http://localhost:8080",
         "default": true
       }
     }
   }

3. Initialize a session:

   curl -X POST http://localhost:8080/session/init \
     -H "Content-Type: application/json" \
     -d '{"tools": ["readFile", "writeFile", "runCommand", "listFiles"]}'

4. Use the session ID with Qwen Code commands to perform operations in a secure, sandboxed environment.

See the Qwen CLI Integration Guide for detailed instructions.

Architecture

The MCP server follows a modular architecture with the following components:

• MCP Gateway - Accepts connections (gRPC + WebSocket for streaming)

• Session Manager - Handles authentication, session lifecycle, and capability negotiation

• Resource Manager - File system abstraction with policy enforcement

• Execution Manager - Runs commands/tools inside sandboxed runtimes (Docker)

• Policy Engine - Enforces access rules and maintains audit logs

• Audit Log - Immutable logging system for accountability

• Sandbox Runtime - Docker containers with controlled resources

• Workspace Storage - Persistent project storage (bind-mounted or virtual FS)

Security

• Sandboxed execution using Docker containers

• Resource policy enforcement

• Audit logging for all actions

• Capability negotiation

• Rate limiting

• Policy-based access control

License

MIT