spring-ai-mcp — security grade SAFE, quality 76/100

Security audit verdict: SAFE · quality 76/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by spring-attic · MCP Server · ★ 204

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is spring-ai-mcp safe to install? View the security audit →

About spring-ai-mcp

NOTE: This project has been graduated and moved to the MCP Java SDK and Spring AI MCP. See you there! This repository is now archived. Java & Spring MCP Set of projects that provide Java SDK and Spring Framework integration for the Model Context Protocol. It enables Java applications to interact with AI models and tools through a standardized interface, supporting both synchronous and asynchronous communication patterns. 📚 Reference Documentation For comprehensive guides and API documentation, visit the Spring AI MCP Reference Documentation. Projects MCP Java SDK Java implementation of the Model Context Protocol specification. It includes: Synchronous and asynchronous [MCP Client](h

aijavamcpspring

Quick Facts

Stars204
Forks50
LanguageJava
CategoryMCP Server
LicenseApache-2.0
Quality Score75.9897517761722/100
Open Issues5
Last Updated2025-02-14
Created2024-12-06
Platformsjava, mcp
Est. Tokens~259k

Compatible Skills

These tools work well together with spring-ai-mcp for enhanced workflows:

  • spring-ai-agent-utils — semantic(0.23)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (61%)
  • api2mcp4j — semantic(0.40)+shared_fw(spring)+rare_topics+same_lang+similar_pop+shared_platform (61%)
  • yu-ai-agent — semantic(0.46)+shared_fw(spring)+rare_topics+same_lang+similar_pop+shared_platform (59%)

spring-ai-mcp alternative? Top 6 similar tools

Looking for a spring-ai-mcp alternative? If you're comparing spring-ai-mcp with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • api2mcp4j by TheEterna · ⭐ 109

    Spring Boot Starter: Auto-convert existing REST APIs (@RestController) to MCP Server with zero/low-code. Expos

  • azure-ai-travel-agents by Azure-Samples · ⭐ 482

    A robust enterprise application sample (deployed on ACA) that leverages MCP and multiple AI agents orchestrate

  • spring-plugin by explyt · ⭐ 161

    Spring Explyt — free, open-source (Apache-2.0) Spring & Spring Boot plugin that brings Ultimate-grade tooling

  • yu-ai-agent by hfgwygey · ⭐ 96

    编程导航 2025 年 AI 开发实战新项目,基于 Spring Boot 3 + Java 21 + Spring AI 构建 AI 恋爱大师应用和 ReAct 模式自主规划智能体YuManus,覆盖 AI 大模型接入

  • drift by dadbodgeoff · ⭐ 785

    Codebase intelligence for AI. Detects patterns & conventions + remembers decisions across sessions. MCP server

  • tda by irockel · ⭐ 552

    TDA - Thread Dump Analyzer (for Java). Analyze your Thread Dumps with a GUI or use it as MCP Server.

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Java Agent Tools

Frequently Asked Questions

What is spring-ai-mcp?

spring-ai-mcp is Java SDK for the Model Context Protocol (MCP), providing seamless integration between Java and Spring applications and MCP-compliant AI models and tools.. It is categorized as a MCP Server with 204 GitHub stars.

What programming language is spring-ai-mcp written in?

spring-ai-mcp is primarily written in Java. It covers topics such as ai, java, mcp.

How do I install or use spring-ai-mcp?

You can find installation instructions and usage details in the spring-ai-mcp GitHub repository at github.com/spring-attic/spring-ai-mcp. The project has 204 stars and 50 forks, indicating an active community.

What license does spring-ai-mcp use?

spring-ai-mcp is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to spring-ai-mcp?

The top alternatives to spring-ai-mcp on Agent Skills Hub include api2mcp4j, azure-ai-travel-agents, spring-plugin. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools