Chart MinIOBLOCK
mcp-server-chart私有化部署方案
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
基于 NestJS 的图表生成服务,集成 MinIO 对象存储,支持 22+ 种图表类型的服务器端渲染。
✨ 主要特性
- 🎨 22+ 图表类型:线图、柱图、饼图、雷达图、桑基图等
- 🚀 服务器端渲染:基于 @antv/gpt-vis-ssr 的高性能图表生成
- ☁️ 云存储集成:MinIO 对象存储,自动生成访问URL
- 🔧 RESTful API:完整的 OpenAPI 文档
- 🐳 Docker 部署:一键启动完整服务
📈 支持的图表类型
基础图表:line(折线图)、area(面积图)、column(柱状图)、bar(条形图)、pie(饼图)、scatter(散点图)
高级图表:histogram(直方图)、boxplot(箱线图)、radar(雷达图)、funnel(漏斗图)、treemap(树状图)、sankey(桑基图)、word-cloud(词云图)、dual-axes(双轴图)、liquid(水波图)、violin(小提琴图)、venn(韦恩图)
关系图表:mind-map(思维导图)、organization-chart(组织架构图)、flow-diagram(流程图)、fishbone-diagram(鱼骨图)、network-graph(网络图)
🛠️ 系统要求
- Node.js (v18+)
- npm 或 yarn
- Docker (推荐)
🚀 快速开始
方式一:Docker Compose 完整部署(推荐)
适用于:生产环境、虚拟机部署、一键启动完整服务
🏠 本地测试部署
- 克隆项目:
git clone cd mcp-server-chart-minio
- 使用 Docker 配置文件启动所有服务:
docker compose --env-file .env.docker up -d
- 访问服务:
- 📊 API 服务: http://localhost:3000
- 📖 API 文档: http://localhost:3000/api/docs
- 💾 MinIO 控制台: http://localhost:9001 (minioadmin/minioadmin)
🌐 生产环境/虚拟机部署
重要配置参数说明(基于 .env.production):
- 修改外部访问地址与凭证(必须):
创建或编辑 .env.production,至少设置:
PUBLIC_API_URL=http://YOUR_SERVER_IP:3000 MINIO_EXTERNAL_ENDPOINT=YOUR_SERVER_IP MINIO_EXTERNAL_PORT=9000 MINIO_ROOT_USER=your_admin_user MINIO_ROOT_PASSWORD=your_secure_pwd MINIO_ACCESS_KEY=your_admin_user MINIO_SECRET_KEY=your_secure_pwd MINIO_AUTO_CREATE_BUCKET=false
- 端口配置(可选):
在 .env.production 中调整:
PORT应用端口(默认3000)MINIO_EXTERNAL_PORTMinIO 对外端口(默认9000)
- 数据持久化:
默认使用 Docker 卷存储,如需指定路径,在 Compose 中设置:
volumes: - /your/data/path:/data # 替换为实际路径
快速部署脚本
Linux/macOS:
./deploy-production.sh
Windows:
deploy-production.bat
方式二:本地开发模式
适用于:本地开发、调试、代码修改
- 克隆项目:
git clone cd mcp-server-chart-minio
1d73a3134677OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-server-chart-minio -- npx -y [email protected]
{
"mcpServers": {
"mcp-server-chart-minio": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (5)
4 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
CEO | read | Chief Executive Officer |
CFO | read | Chief Financial Officer |
CTO | read | Chief Technology Officer |
Organization | read | Organization Structure |
bucketName | destructive | Name of the bucket to delete |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | FAIL |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (9)
.env
# PUBLIC_API_URL=http://192.168.1.100:3000 # Local network
bucketName
.env
.env.docker
.env.production
.eslintrc.js
- PUBLIC_API_URL=http://192.168.1.100:3000
@nestjs/common, @nestjs/config, @nestjs/core, @nestjs/platform-express, @nestjs/swagger, axios, class-transformer, class-validator
Gates applied: no_behavioural_pass.
1d73a3134677full audit observations/trust-audit/mcp-server/zaizaizhao__chart-minio.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 1d73a3134677 | BLOCK | D | 69 | first audit |
Questions
What is the Chart MinIO MCP server?
mcp-server-chart私有化部署方案
What tools does Chart MinIO expose?
5 in total: 4 read-only, 0 that write, and 1 that can delete or overwrite (bucketName). Every one is listed on this page with its risk.
Is Chart MinIO safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Chart MinIO need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (1d73a3134677), read on 2026-10-08. The repository is watched and re-audited when it changes.