Skip to main content
Glama

condor-mcp

A typed MCP server exposing a single tool (catalog.search) that queries a product catalog stored in SQLite.

Tool

  • catalog.search — returns products in a given category.

Related MCP server: Product MCP Server

Security controls

  • Bearer access tokens (HMAC-signed, expiry- and client-bound) required on /tools/list and /tools/call.

  • Admin-key-gated token minting (/auth/token).

  • Signed tool manifest (content hash + HMAC).

  • Origin/Host allowlist; strict env loader; rate limiting; timeouts; body-size limits; structured audit logging; 127.0.0.1 binding.

Layout

src/
  server.js                 Express entrypoint, token mint, tool routes
  config.js                 Strict env loader
  db.js                     SQLite setup + query helpers
  tools.js                  Tool definitions + handlers
  middleware/
    origin-host.js          Origin/Host allowlist
    bearer-auth.js          Access-token issuance/verification + admin key
  observability/
    audit.js                Structured JSON audit logging

Running

npm install
SESSION_SECRET=$(openssl rand -hex 32) \
ADMIN_KEY=$(openssl rand -hex 32) \
TOOL_SIGNING_KEY=$(openssl rand -hex 32) \
ALLOWED_HOSTS=127.0.0.1:8787,localhost:8787 \
npm start
F
license - not found
-
quality - not tested
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/locus-x64/condor-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server