Costruire un server MCP che si collega a OpenAI: Guida completa per sviluppatori

mkdir mcp-server-openai
cd mcp-server-openai
npm init -y
npm install @modelcontextprotocol/sdk openai dotenv express cors
npm install --save-dev typescript @types/node ts-node

{
  "compilerOptions": {
    "target": "ES2020",
    "module": "commonjs",
    "lib": ["ES2020"],
    "outDir": "./dist",
    "rootDir": "./src",
    "strict": true,
    "esModuleInterop": true,
    "skipLibCheck": true,
    "forceConsistentCasingInFileNames": true
  }
}

python -m venv venv
source venv/bin/activate  # Su Windows: venv\Scripts\activate
pip install mcp openai python-dotenv fastapi uvicorn

import { Server } from "@modelcontextprotocol/sdk/server/index.js";
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
import {
  CallToolRequestSchema,
  ListToolsRequestSchema,
} from "@modelcontextprotocol/sdk/types.js";

const server = new Server({
  name: "openai-mcp-server",
  version: "1.0.0",
});

// Definisci i tuoi strumenti
const tools = [
  {
    name: "get_customer_info",
    description: "Recupera informazioni cliente tramite ID",
    inputSchema: {
      type: "object",
      properties: {
        customer_id: {
          type: "string",
          description: "Identificativo univoco del cliente",
        },
      },
      required: ["customer_id"],
    },
  },
  // Aggiungi altri strumenti qui
];

// Gestione richiesta elenco strumenti
server.setRequestHandler(ListToolsRequestSchema, async () => {
  return { tools };
});

// Gestione richiesta esecuzione strumento
server.setRequestHandler(CallToolRequestSchema, async (request) => {
  const { name, arguments: args } = request.params;

  if (name === "get_customer_info") {
    // Logica dello strumento
    const customerId = args.customer_id;
    // Query su database o API
    return {
      content: [
        {
          type: "text",
          text: JSON.stringify({
            id: customerId,
            name: "John Doe",
            email: "john@example.com",
          }),
        },
      ],
    };
  }

  return {
    content: [{ type: "text", text: `Strumento sconosciuto: ${name}` }],
    isError: true,
  };
});

// Avvia il server
const transport = new StdioServerTransport();
server.connect(transport);

from mcp.server import Server
from mcp.types import Tool, TextContent, ToolResult
import json

app = Server("openai-mcp-server")

# Definisci i tuoi strumenti
TOOLS = [
    Tool(
        name="get_customer_info",
        description="Recupera informazioni cliente tramite ID",
        inputSchema={
            "type": "object",
            "properties": {
                "customer_id": {
                    "type": "string",
                    "description": "Identificativo univoco del cliente"
                }
            },
            "required": ["customer_id"]
        }
    )
]

@app.list_tools()
async def list_tools():
    return TOOLS

@app.call_tool()
async def call_tool(name: str, arguments: dict):
    if name == "get_customer_info":
        customer_id = arguments.get("customer_id")
        # Logica dello strumento
        result = {
            "id": customer_id,
            "name": "John Doe",
            "email": "john@example.com"
        }
        return ToolResult(
            content=[TextContent(type="text", text=json.dumps(result))]
        )

    return ToolResult(
        content=[TextContent(type="text", text=f"Strumento sconosciuto: {name}")],
        isError=True
    )

if __name__ == "__main__":
    import uvicorn
    uvicorn.run(app, host="0.0.0.0", port=8000)

import { Pool } from "pg"; // Esempio PostgreSQL

const pool = new Pool({
  connectionString: process.env.DATABASE_URL,
});

async function getCustomerInfo(customerId: string) {
  try {
    const result = await pool.query(
      "SELECT id, name, email, account_status FROM customers WHERE id = $1",
      [customerId]
    );

    if (result.rows.length === 0) {
      return {
        error: "Cliente non trovato",
        status: 404,
      };
    }

    return result.rows[0];
  } catch (error) {
    return {
      error: "Query database fallita",
      details: error.message,
      status: 500,
    };
  }
}

import axios from "axios";

async function searchExternalDatabase(query: string) {
  try {
    const response = await axios.get(
      "https://api.external-service.com/search",
      {
        params: { q: query },
        headers: {
          Authorization: `Bearer ${process.env.EXTERNAL_API_KEY}`,
        },
      }
    );

    return response.data;
  } catch (error) {
    return {
      error: "Chiamata API esterna fallita",
      details: error.message,
    };
  }
}

function validateInput(args: any, schema: any): { valid: boolean; error?: string } {
  // Valida i campi richiesti
  for (const required of schema.required || []) {
    if (!(required in args)) {
      return { valid: false, error: `Parametro richiesto mancante: ${required}` };
    }
  }

  // Valida i tipi dei campi
  for (const [key, property] of Object.entries(schema.properties || {})) {
    if (key in args) {
      const value = args[key];
      const expectedType = (property as any).type;

      if (typeof value !== expectedType) {
        return {
          valid: false,
          error: `Il parametro ${key} deve essere di tipo ${expectedType}`,
        };
      }
    }
  }

  return { valid: true };
}

import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
import OpenAI from "openai";

class MCPOpenAIBridge {
  private mcpClient: Client;
  private openaiClient: OpenAI;
  private availableTools: any[] = [];

  constructor() {
    this.openaiClient = new OpenAI({
      apiKey: process.env.OPENAI_API_KEY,
    });
  }

  async initialize() {
    // Connessione al server MCP
    const transport = new StdioClientTransport({
      command: "node",
      args: ["dist/server.js"],
    });

    this.mcpClient = new Client({
      name: "openai-mcp-client",
      version: "1.0.0",
    });

    await this.mcpClient.connect(transport);

    // Scoperta strumenti disponibili
    const toolsResponse = await this.mcpClient.listTools();
    this.availableTools = toolsResponse.tools;
  }

  async executeWithOpenAI(userMessage: string) {
    const messages = [{ role: "user" as const, content: userMessage }];

    // Conversione strumenti MCP in formato funzione OpenAI
    const tools = this.availableTools.map((tool) => ({
      type: "function" as const,
      function: {
        name: tool.name,
        description: tool.description,
        parameters: tool.inputSchema,
      },
    }));

    let response = await this.openaiClient.chat.completions.create({
      model: "gpt-4",
      messages,
      tools,
    });

    // Gestione chiamate agli strumenti in loop
    while (response.choices[0].finish_reason === "tool_calls") {
      const toolCalls = response.choices[0].message.tool_calls || [];

      for (const toolCall of toolCalls) {
        const toolName = toolCall.function.name;
        const toolArgs = JSON.parse(toolCall.function.arguments);

        // Esecuzione strumento su MCP server
        const toolResult = await this.mcpClient.callTool({
          name: toolName,
          arguments: toolArgs,
        });

        // Aggiunge risultato strumento ai messaggi
        messages.push({
          role: "assistant",
          content: response.choices[0].message.content || "",
        });

        messages.push({
          role: "tool",
          content: JSON.stringify(toolResult),
          tool_call_id: toolCall.id,
        });
      }

      // Ottiene la prossima risposta da OpenAI
      response = await this.openaiClient.chat.completions.create({
        model: "gpt-4",
        messages,
        tools,
      });
    }

    return response.choices[0].message.content;
  }
}

// Utilizzo
const bridge = new MCPOpenAIBridge();
await bridge.initialize();
const result = await bridge.executeWithOpenAI(
  "Qual è la cronologia ordini per il cliente 12345?"
);
console.log(result);

import crypto from "crypto";

class APIKeyManager {
  private validKeys: Set<string> = new Set();

  constructor() {
    // Carica chiavi API valide da ambiente o storage sicuro
    const keys = process.env.VALID_API_KEYS?.split(",") || [];
    this.validKeys = new Set(keys);
  }

  validateRequest(apiKey: string): boolean {
    return this.validKeys.has(apiKey);
  }

  generateNewKey(): string {
    return crypto.randomBytes(32).toString("hex");
  }
}

import crypto from "crypto";

function signRequest(payload: any, secret: string): string {
  return crypto
    .createHmac("sha256", secret)
    .update(JSON.stringify(payload))
    .digest("hex");
}

function verifySignature(payload: any, signature: string, secret: string): boolean {
  const expectedSignature = signRequest(payload, secret);
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

import rateLimit from "express-rate-limit";

const limiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minuti
  max: 100, // massimo 100 richieste per IP ogni 15 minuti
  message: "Troppe richieste da questo IP, riprova più tardi.",
});

app.use("/api/", limiter);

function sanitizeInput(input: string): string {
  // Rimuove caratteri potenzialmente pericolosi
  return input
    .replace(/[<>]/g, "")
    .trim()
    .substring(0, 1000); // Limita la lunghezza
}

function validateCustomerId(customerId: string): boolean {
  // Consenti solo alfanumerici e trattini
  return /^[a-zA-Z0-9-]+$/.test(customerId);
}

import { getCustomerInfo } from "../tools/customer";

describe("Strumenti Cliente", () => {
  test("restituisce info cliente per ID valido", async () => {
    const result = await getCustomerInfo("cust_123");
    expect(result).toHaveProperty("id");
    expect(result).toHaveProperty("name");
    expect(result).toHaveProperty("email");
  });

  test("restituisce errore per ID non valido", async () => {
    const result = await getCustomerInfo("invalid");
    expect(result).toHaveProperty("error");
  });

  test("gestisce errori database correttamente", async () => {
    // Simula errore database
    const result = await getCustomerInfo("cust_error");
    expect(result).toHaveProperty("error");
    expect(result.status).toBe(500);
  });
});

describe("Integrazione server MCP", () => {
  let server: Server;

  beforeAll(async () => {
    server = new Server({ name: "test-server", version: "1.0.0" });
    // Inizializzazione server
  });

  test("elenca tutti gli strumenti disponibili", async () => {
    const tools = await server.listTools();
    expect(tools.length).toBeGreaterThan(0);
    expect(tools[0]).toHaveProperty("name");
    expect(tools[0]).toHaveProperty("description");
  });

  test("esegue strumento e restituisce risultato", async () => {
    const result = await server.callTool({
      name: "get_customer_info",
      arguments: { customer_id: "cust_123" },
    });
    expect(result).toBeDefined();
  });
});

FROM node:18-alpine

WORKDIR /app

COPY package*.json ./
RUN npm ci --only=production

COPY dist ./dist

EXPOSE 8000

CMD ["node", "dist/server.js"]

docker build -t my-mcp-server:1.0.0 .
docker push myregistry.azurecr.io/my-mcp-server:1.0.0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: mcp-server
spec:
  replicas: 3
  selector:
    matchLabels:
      app: mcp-server
  template:
    metadata:
      labels:
        app: mcp-server
    spec:
      containers:
      - name: mcp-server
        image: myregistry.azurecr.io/my-mcp-server:1.0.0
        ports:
        - containerPort: 8000
        env:
        - name: OPENAI_API_KEY
          valueFrom:
            secretKeyRef:
              name: openai-secrets
              key: api-key
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              name: db-secrets
              key: connection-string
        resources:
          requests:
            memory: "256Mi"
            cpu: "250m"
          limits:
            memory: "512Mi"
            cpu: "500m"

# .env.production
OPENAI_API_KEY=sk-...
DATABASE_URL=postgresql://user:pass@host:5432/db
MCP_SERVER_PORT=8000
LOG_LEVEL=info
ENABLE_METRICS=true

async function processCustomerRefund(customerId: string, orderId: string, amount: number) {
  // Ottieni info cliente
  const customer = await getCustomerInfo(customerId);
  
  // Ottieni dettagli ordine
  const order = await getOrderDetails(orderId);
  
  // Verifica appartenenza ordine-cliente
  if (order.customerId !== customerId) {
    throw new Error("L’ordine non appartiene al cliente");
  }
  
  // Processa rimborso
  const refund = await createRefund(orderId, amount);
  
  // Invia notifica
  await sendNotification(customer.email, `Rimborso di €${amount} elaborato`);
  
  return refund;
}

import NodeCache from "node-cache";

const cache = new NodeCache({ stdTTL: 600 }); // TTL 10 minuti

async function getCustomerInfoWithCache(customerId: string) {
  const cacheKey = `customer_${customerId}`;
  
  // Prima controlla cache
  const cached = cache.get(cacheKey);
  if (cached) {
    return cached;
  }
  
  // Recupera da database
  const customer = await getCustomerInfo(customerId);
  
  // Salva in cache
  cache.set(cacheKey, customer);
  
  return customer;
}

import Bull from "bull";

const jobQueue = new Bull("mcp-jobs");

jobQueue.process(async (job) => {
  const { toolName, arguments: args } = job.data;
  
  // Esegui strumento
  const result = await executeTool(toolName, args);
  
  return result;
});

async function executeToolAsync(toolName: string, args: any) {
  const job = await jobQueue.add(
    { toolName, arguments: args },
    { attempts: 3, backoff: { type: "exponential", delay: 2000 } }
  );
  
  return job.id;
}

import winston from "winston";

const logger = winston.createLogger({
  format: winston.format.json(),
  transports: [
    new winston.transports.File({ filename: "error.log", level: "error" }),
    new winston.transports.File({ filename: "combined.log" }),
  ],
});

logger.info("Strumento eseguito", {
  toolName: "get_customer_info",
  customerId: "cust_123",
  duration: 145,
  status: "success",
});

import prometheus from "prom-client";

const toolExecutionDuration = new prometheus.Histogram({
  name: "mcp_tool_execution_duration_ms",
  help: "Durata esecuzione dello strumento in millisecondi",
  labelNames: ["tool_name", "status"],
});

const toolExecutionCounter = new prometheus.Counter({
  name: "mcp_tool_executions_total",
  help: "Numero totale esecuzioni strumenti",
  labelNames: ["tool_name", "status"],
});

async function executeToolWithMetrics(toolName: string, args: any) {
  const startTime = Date.now();
  
  try {
    const result = await executeTool(toolName, args);
    const duration = Date.now() - startTime;
    
    toolExecutionDuration.labels(toolName, "success").observe(duration);
    toolExecutionCounter.labels(toolName, "success").inc();
    
    return result;
  } catch (error) {
    const duration = Date.now() - startTime;
    
    toolExecutionDuration.labels(toolName, "error").observe(duration);
    toolExecutionCounter.labels(toolName, "error").inc();
    
    throw error;
  }
}