MCP Server for Apache OFBiz®

This project provides an implementation of a Model Context Protocol (MCP) server that runs custom tools to invoke remote services thorugh API endpoints, based on requests from an MCP client (usually hosted in a generative AI application such as Claude Desktop).

The project is implemented with the Anthropic TypeScript SDK, and requires Node.js as runtime environment.

By leveraging the sample configuration and tool files contained in the examples folder, the MCP server can be easly configured, e.g., to point to specific backend systems and to use OAuth2.0 authorization flows, and new tools can be developed to address specific use cases.

In short, this project can be used as a platform to implement your own tools and enable generative AI applications to interact with any backend system that exposes API endpoints, such as Apache OFBiz® or Moqui.

This software is licensed under the Apache License, Version 2.0.

Apache OFBiz® is a trademark of the Apache Software Foundation.

Table of Contents

1. Quick-start guide
2. Features
3. Configuration
4. Project Structure
5. Build the Project
6. Test the Remote MCP Server
7. Inspect the MCP server
8. Containerization with Docker

Quick-start guide

> git clone https://github.com/jacopoc/mcp-server-for-apache-ofbiz.git mcp-server
> cd mcp-server
mcp-server> npm install
mcp-server> cd examples/tools
mcp-server/examples/tools> npm install
mcp-server/examples/tools> npm run build
mcp-server/examples/tools> cd ..
mcp-server/examples> ./update_token.sh admin ofbiz
mcp-server/examples> cd ..
mcp-server> node build/server.js ./examples/config ./examples/tools

From another shell you can start the MCP Inspector:

> npx @modelcontextprotocol/inspector

This command will open a browser window to the Inspector application: set Transport Type to Streamable HTTP and URL to http://localhost:3000/mcp and hit the Connect button. After that, you will be connected to the MCP server and could execute its tool, that fetches data from one of the public demo instances of Apache OFBiz.

Features

The MCP server communicates with the MCP client via MCP Streamable HTTP transport.

The server dynamically discovers custom tools contained in a directory, whose path is specified as a command-line argument when the server is lauched.

The tools are defined and implemented in their own files. For example, the sample tool examples/tools/src/findProductById.ts invokes an endpoint in Apache OFBiz to retrieve product information for a given product ID. This works with an out-of-the-box (OOTB) OFBiz instance with the rest-api plugin installed.

The server:

• is compliant with the latest MCP specifications (2025-11-25)
• supports authorization according to the MCP recommendations (OAuth Authorization Code Flow with support for Metadata discovery, dynamically registered clients, etc...)
• supports the token exchange OAuth flow in order to obtain a valid token for the backend system
• performs token validation with configurable scopes and audience verification
• supports TLS connections (https) for secure, encrypted communications over public networks
• provides rate limiting features to protect the MCP server and the backend server from denial of service attacks
• allows CORS restriction to enable secure interactions with trusted front-end applications
• supports hosts and origins restrictions for DNS rebinding protection, useful when the server is deployed as a local application

Configuration

Server configuration is managed via the config.json file contained in a configuration directory, whose path is specified as a command-line argument when the server is l

... View full README on GitHub