Blindkey
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| BLINDKEY_URL | No | Server URL used by the CLI/agent, e.g. http://localhost:8080 (resolved before ~/.config/blindkey/config.json). | |
| BLINDKEY_HOST | No | Host the server listens on (default 0.0.0.0). | |
| BLINDKEY_PORT | No | Port the server listens on (default 8080). The MCP endpoint is served at /mcp on this port. | |
| BLINDKEY_TOKEN | No | API/agent token used by the CLI/agent (resolved before ~/.config/blindkey/config.json). Agent tokens are obtained by approving a device-code flow in the browser and are stored in the OS credential store. | |
| BLINDKEY_DB_PATH | No | Path to the SQLite database (default $BLINDKEY_DATA_DIR/blindkey.sqlite). | |
| BLINDKEY_DATA_DIR | No | Directory for the SQLite database and backups (default /data). | |
| BLINDKEY_LOG_LEVEL | No | Pino log level; logs are JSON on stdout, with credentials and secret-bearing request bodies redacted (default info). | |
| BLINDKEY_MASTER_KEY | Yes | Base64 32-byte master key (or BLINDKEY_MASTER_KEY_FILE) — required; back it up separately. It is never stored in the database, baked into the image, or included in a backup. | |
| BLINDKEY_TRUST_PROXY | No | Which proxy hops to trust for client IP: false, true, or a comma-separated IP/CIDR list of trusted proxies (default false). Required behind a reverse proxy so the admin session cookie gets its Secure flag. | |
| BLINDKEY_ADMIN_PASSWORD | No | Admin password for blindkey-server init (create) and blindkey-server passwd (reset); prompted interactively when unset (passing it inline leaks into shell history and the process list). | |
| BLINDKEY_ADMIN_USERNAME | No | Admin username for blindkey-server init (create) and blindkey-server passwd (reset); prompted interactively when unset. | |
| BLINDKEY_MASTER_KEY_VERSION | No | Current master key version (default 1). | |
| BLINDKEY_MASTER_KEY_PREVIOUS | No | Older keys for key rotation, given as comma-separated version:base64 pairs, e.g. 1:<base64>,2:<base64>. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues