liblib-mcp-server

⚠ Stale — 197d ago

Provides an MCP server that dynamically exposes Liblib/ComfyUI workflows as MCP Tools, alongside a management UI and REST APIs for multi-tenant workflow and credential management.

Evaluated Apr 04, 2026 (197d ago)
Repo ↗ DevTools mcp comfyui liblib go multi-tenant api workflow-automation self-hosted
⚙ Agent Friendliness
45
/ 100
Can an agent use this?
🔒 Security
52
/ 100
Is it safe for agents?
⚡ Reliability
28
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
55
Documentation
65
Error Messages
0
Auth Simplicity
70
Rate Limits
0

🔒 Security

TLS Enforcement
50
Auth Strength
70
Scope Granularity
20
Dep. Hygiene
45
Secret Handling
70

README claims AES-256-GCM encryption for stored API keys (improves secret-at-rest safety) and JWT/Bearer auth for requests. However, TLS is only described as 'supports HTTPS deployment' rather than enforced, and there is no evidence of fine-grained scopes/roles, rate-limit controls, CSRF protections (for UI), or detailed security error handling. Dependency list is minimal but no vulnerability/SBOM evidence is provided.

⚡ Reliability

Uptime/SLA
20
Version Stability
35
Breaking Changes
20
Error Recovery
35
AF Security Reliability

Best When

Self-hosting a lightweight MCP gateway for Liblib/ComfyUI workflows with per-user isolation and an accompanying admin UI.

Avoid When

When you need a fully specified OpenAPI spec, SDKs, or clearly documented operational guarantees (SLA, rate-limit headers, error codes).

Use Cases

  • • Connect an MCP-capable client (e.g., IDE assistants) to Liblib ComfyUI workflows as callable tools
  • • Manage Liblib API credentials and map workflow UUIDs to MCP tools per tenant/user
  • • Automate workflow execution with dynamic parameter parsing/validation

Not For

  • • Highly regulated environments requiring formally verified compliance controls (not evidenced in provided materials)
  • • Public internet deployments without additional infrastructure hardening (rate limiting, WAF, network controls) not described in README

Interface

REST API
Yes
GraphQL
No
gRPC
No
MCP Server
Yes ↗
SDK
No
Webhooks
No

Authentication

Methods: JWT Bearer token (for management API)
OAuth: No Scopes: No

README describes login to obtain a JWT token and Bearer auth for API routes and MCP auth token usage; does not mention fine-grained scopes/roles.

Pricing

Free tier: No
Requires CC: No

Self-hosted open-source project; no commercial pricing described.

Agent Metadata

Pagination
none
Idempotent
False
Retry Guidance
Not documented

Known Gotchas

  • ⚠ No explicit documentation for MCP tool list/discovery behavior beyond general statements; agent may need to probe tools at runtime.
  • ⚠ MCP authentication relies on a Bearer token passed as MCP_AUTH_TOKEN; ensure token is accepted for /mcp tool calls.
  • ⚠ Rate limits are not documented; agents may need to implement conservative request pacing.

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for liblib-mcp-server.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-04-04.

8642
Packages Evaluated
17761
Need Evaluation
9228
Need Re-evaluation
♥
Community Powered