Schema | Sytadel MCP Server

Sytadel MCP Server

Describes the environment variables required to run the server.

Name	Required	Description	Default
`SYTADEL_TIMEOUT_MS`	No	Timeout for HTTP requests in milliseconds.	60000
`SYTADEL_USER_EMAIL`	No	The email address of the user (user mode).
`SYTADEL_ZT_API_URL`	No	The base URL for the Sytadel zero-trust API.	http://localhost:3010
`SYTADEL_TENANT_SLUG`	No	The tenant slug for your Sytadel tenant.
`SYTADEL_AUTH_API_URL`	No	The base URL for the Sytadel auth API.	http://localhost:3002/api
`SYTADEL_CLIENT_APP_ID`	No	The client app ID for service account mode.
`SYTADEL_USER_PASSWORD`	No	The password of the user (user mode).
`SYTADEL_SERVICE_ACCOUNT_ID`	No	The service account ID for service account mode.
`SYTADEL_SERVICE_ACCOUNT_SECRET`	No	The service account secret for service account mode.

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{}

Functions exposed to the LLM to take actions

Name	Description
list_tenant_usersA	List all users of the current Sytadel tenant with their role, active flag, passkey count, and last login. Useful for access reviews and off-boarding checks.
list_service_accountsA	List service accounts (machine credentials) under every client app of the current tenant, with last-used timestamps and auto-rotation state. Useful for spotting dormant integrations.
query_session_anomaliesA	Return recent session anomaly events (login from new IP / new country / new device / high score) for the calling user, up to `limit` rows. Ordered newest first.
generate_policyA	Compile a natural-language RBAC intent (e.g. "OWNER can do anything, MEMBER can only GET /vaults, default deny") into a Sytadel PolicySet JSON. Returns policy, warnings, cost, tokens, latency. Read-only: the compiled policy is NOT applied — call PUT /policies/:tenantId separately to enforce it.
run_access_reviewA	Trigger an on-demand AI-driven access review for the current tenant. Claude reviews users, service accounts and recent anomalies, and returns a markdown report plus a machine-readable list of recommendations (revoke, downgrade, disable_service_account, rotate_service_account_secret, delete_passkey, require_password_reset, review_manually).

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ElwinErnst/sytadel-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server