mcp-secure
by JacquesCyber
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_DEBUG | No | Enable debug mode (true/false) | |
| MCP_AUDIENCE | Yes | Expected token audience, e.g. api://<client-id> (required) | |
| MCP_TENANT_ID | Yes | Entra tenant ID (required) | |
| MCP_RATE_LIMIT | No | Rate limit, e.g. 60/minute | |
| MCP_SERVER_URL | Yes | Canonical public URL of this server, RFC 8707 (required) | |
| MCP_ENVIRONMENT | No | Set to 'production' to enforce real Entra auth | |
| MCP_ALLOWED_HOSTS | No | Host allow-list for DNS-rebinding protection | |
| MCP_REQUIRE_HTTPS | No | Require HTTPS (true/false) | |
| MCP_MAX_BODY_BYTES | No | Maximum body size in bytes | |
| MCP_REQUIRED_SCOPES | No | Server-wide minimum scopes (comma-separated) |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/JacquesCyber/mcp-secure'
If you have feedback or need assistance with the MCP directory API, please join our Discord server