SuperBLOCK
🚀 SuperMCP - Create multiple isolated MCP servers using a single connector. Build powerful Model Context Protocol integrations for databases (PostgreSQL, MSSQL) with FastAPI backend, React dashboard, and token-based auth. Perfect for multi-tenant apps and AI assistants.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A comprehensive platform for creating, deploying, and managing Model Context Protocol (MCP) connectors that bridge AI assistants with databases, APIs, and other data sources.
[](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://fastapi.tiangolo.com/) [](https://reactjs.org/)
📹 Introduction Video
SuperMCP Introduction
▶️ Watch on YouTube
SuperMCP new design
▶️ Watch on YouTube
🎯 What is SuperMCP?
SuperMCP is a powerful platform that enables you to create multiple isolated MCP servers using a single standalone connector. This unique architecture allows you to:
- Multi-Server from One Connector: Deploy one connector instance and create unlimited isolated MCP servers with different configurations
- Isolated Configurations: Each MCP server has its own credentials, connection settings, and security tokens
- Resource Efficient: Share connection pools and resources across servers while maintaining isolation
- Simplified Management: Manage all your database connections from a singl
4b9e8674fe0cOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add web --env CONNECTOR_SECRET=${CONNECTOR_SECRET} --env NEO4J_PASSWORD=${NEO4J_PASSWORD} -- npx -y [email protected]{
"mcpServers": {
"web": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CONNECTOR_SECRET": "${CONNECTOR_SECRET}",
"NEO4J_PASSWORD": "${NEO4J_PASSWORD}"
}
}
}
}Exposed tools (56)
41 read · 9 write · 6 destructive. Blast radius: 6 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
create_configmap | write | |
create_dashboard | write | |
create_deployment | write | |
create_secret | write | |
create_service | write | |
delete_configmap | destructive | |
delete_dashboard | destructive | |
delete_deployment | destructive | |
delete_pod | destructive | |
delete_secret | destructive | |
delete_service | destructive | |
execute_query | write | |
get_configmap | read | |
get_dashboard | read | |
get_dashboard_permissions | read | |
get_datasource_by_name | read | |
get_deployment | read | |
get_ingress | read | |
get_namespace | read | |
get_neo4j_schema | read | |
get_pod | read | |
get_pod_logs | read | |
get_pvc | read | |
get_secret | read | |
get_service | read | |
get_sql_db_config | read | server_id = get_current_server_id() |
get_table_schema | read | |
get_volume_info | read | |
hello_tool | read | |
hello_tool_x | read | |
list_catalogs | read | |
list_configmaps | read | |
list_dashboards | read | |
list_databases | read | |
list_deployments | read | |
list_events | read | |
list_ingresses | read | |
list_namespaces | read | List all namespaces in the cluster. |
list_pods | read | |
list_pvcs | read | |
list_schemas | read | |
list_secrets | read | |
list_services | read | |
list_stages | read | |
list_table_data | read | |
list_tables | read | |
list_volume_data | read | |
list_volumes | read | |
list_warehouses | read | |
read_neo4j_cypher | read | |
scale_deployment | read | |
search_dashboards | read | |
test_connection | read | |
update_dashboard | write | |
update_deployment | write | |
write_neo4j_cypher | write |
Trust audit
BLOCKgrade F · trust 56/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (8 observation(s))
- Network
- declared (12 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
DATABASE_URL: postgresql://postgres:mysecretpassword@postgres:5432/forge_mcptools
print(f"Verifying token: {token.credentials}")print(f"Server ID: {token.mcp_server_id}")print(f"User {user.id} has forgot their password. Reset token: {token}")print(f"Verification requested for user {user.id}. Verification token: {token}")print("Starting MCP server at http://127.0.0.1:8000/mcp")"http://127.0.0.1:9000/api/verify-auth-token",
src="data:image/jpeg;base64,/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/bAIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwMDAwMDAwMDAwMDAEDAwMF
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAQ8AAAD5CAMAAAAOTUC8AAAAA3NCSVQICAjb4U/gAAABDlBMVEX////MzMzFxcUAAAC2traTk5MAAADW1tbMzMy7u7uvr69mZmZUVFROTk4AAADW1tbMzMyZmZlCQkLW1tZra2tmZmbW1tbFxcWvr
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAALwAAADmCAMAAABYgh8IAAAAA3NCSVQICAjb4U/gAAABgFBMVEX///9SOCxSOjH/wp8AAAD+wJ4ICAhWPjL/7tDMQjj////66834vZuZmZmVcl+bdmN7KCIxIRr39/dUQjpRS0nFQjhKMihptaVQR
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAbgAAACcCAMAAAA6Xk4VAAAAA3NCSVQICAjb4U/gAAADAFBMVEX///9NmcCTfmuUe2OQd2KMdWGGcFqEbVqEa1JNmcCbhGucf2ibhGucf2iUe2NHhaiQd2KfinFJm8ajhWubhGucf2iDeW2Qd2KBd
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAKYAAAAxCAYAAABQ69KMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAHXRJREFUeNqEXW/Ebld2X2u/rxBCCCEk7kjdunVJ3XHHMBVCKoRUxjC0OqaUofphVNMvjaE1NbSG9
| `DATABASE_URL` | PostgreSQL connection string | `postgresql://postgres:mysecretpassword@postgres:5432/forge_mcptools` |
"postgresql://postgres:mysecretpassword@localhost:5433/forge_mcptools"
delete_configmap, delete_dashboard, delete_deployment, delete_pod, delete_secret, delete_service
import { API_BASE_URL } from '../../services/api';import { useAuth } from '../../contexts/AuthContext';import { navigationItems } from '../../constants/navigation';import { API_BASE_URL } from '../../constants/env';import { formatError, extractFieldErrors, mapApiFieldToFormField } from '../../utils/errorUtils';- Start the MCP server on `http://127.0.0.1:8015/mcp`
curl -X POST http://127.0.0.1:8015/mcp \
curl -X POST http://127.0.0.1:8015/mcp \
k: base64.b64decode(v).decode('utf-8', errors='replace')fastapi, uvicorn, pydantic, sqlmodel, psycopg2-binary, alembic, python-multipart, requests
Gates applied: no_behavioural_pass.
4b9e8674fe0cfull audit observations/trust-audit/mcp-server/dhanababum__super-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 4b9e8674fe0c | BLOCK | F | 56 | first audit |
Questions
What is the Super MCP server?
🚀 SuperMCP - Create multiple isolated MCP servers using a single connector. Build powerful Model Context Protocol integrations for databases (PostgreSQL, MSSQL) with FastAPI backend, React dashboard, and token-based auth. Perfect for multi-tenant apps and AI assistants.
What tools does Super expose?
56 in total: 41 read-only, 9 that write, and 6 that can delete or overwrite (delete_configmap, delete_dashboard, delete_deployment, delete_pod, delete_secret). Every one is listed on this page with its risk.
Is Super safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (56/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 6 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Super need?
It reads CONNECTOR_SECRET and NEO4J_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Super run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as web at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (4b9e8674fe0c), read on 2026-10-07. The repository is watched and re-audited when it changes.