# Mcp Stack

> This project provides a fully containerized, secure, and unified Model Context Protocol (MCP) stack. It is specifically optimized to run on macOS Apple Silicon using OrbStack, avoiding common issues with Docker socket dependencies.

- **Type:** MCP server
- **Install:** `agentstack add mcp-axelquack-mcp-stack`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [axelquack](https://agentstack.voostack.com/s/axelquack)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [axelquack](https://github.com/axelquack)
- **Source:** https://github.com/axelquack/mcp-stack

## Install

```sh
agentstack add mcp-axelquack-mcp-stack
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Unified MCP Stack (OrbStack Optimized)

This project provides a fully containerized, secure, and unified Model Context Protocol (MCP) stack using **Nginx as a high-performance proxy**. It is specifically optimized to run on **macOS Apple Silicon** using **OrbStack**, avoiding common issues with Docker socket dependencies.

## Architecture

The stack consists of three primary services running in isolated Docker containers:

1.  **Unified Nginx Proxy**: Acts as a central gateway. It routes traffic based on the URL path.
2.  **Context7 MCP Server**: Provides documentation and code context.
3.  **SearXNG MCP Server**: Provides web search capabilities.

## Key Features

*   **Zero Port Exposure**: All port numbers are abstracted into the `.env` file for maximum security and flexibility.
*   **Dynamic Configuration**: Uses `nginx.conf.template` to automatically inject environment variables at startup.
*   **Zero Docker Socket Dependency**: The proxy does not require `/var/run/docker.sock`, significantly improving security.
*   **Unified Access**: Both MCP servers are aggregated behind a single entry point.
*   **Hardened Security**:
    *   Containers run with `read_only: true` filesystems.
    *   Capabilities are dropped (`cap_drop: ALL`).
    *   No privilege escalation allowed (`no-new-privileges: true`).
    *   Internal servers are not exposed to the host/internet; only the Proxy is reachable.

## Getting Started

### Prerequisites
*   [OrbStack](https://orbstack.dev/) (or Docker Desktop)
*   An Olares instance for SearXNG (configured in `.env`)

### Installation

1.  **Start the stack:**
    ```bash
    docker-compose up -d
    ```

2.  **Verify the services:**
    ```bash
    docker-compose ps
    ```

## Connecting to Clients

### Zed
Zed is already configured to use the following endpoints:

*   **Context7**: `http://localhost:${GATEWAY_PORT}/context7/mcp`
*   **SearXNG**: `http://localhost:${GATEWAY_PORT}/searxng/mcp`

You can verify these settings in your Zed `settings.json` file (`cmd+,`).

## Configuration Files

*   **`docker-compose.yml`**: The main orchestration file. Uses environment variables for all network settings.
*   **`nginx.conf.template`**: The routing template that dynamically configures the proxy.
*   **`.env`**: **The only place** where secrets, URLs, and port numbers are stored.

## Troubleshooting

*   **Port Busy**: If the `${GATEWAY_PORT}` is already in use, simply change it in the `.env` file and restart.
*   **Configuration Sync**: If you change ports in `.env`, run `docker-compose up -d` to regenerate the proxy configuration.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [axelquack](https://github.com/axelquack)
- **Source:** [axelquack/mcp-stack](https://github.com/axelquack/mcp-stack)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-axelquack-mcp-stack
- Seller: https://agentstack.voostack.com/s/axelquack
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.