Skip to main content
Glama
KB01111

auth-mcp

by KB01111
OverviewSchemaRelated ServersScoreDiscussions
Python
Hybrid

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
PREFECT_API_KEYNoPrefect Cloud API key with permissions to read/write Secret blocks. Required for the prefect backend.
PREFECT_API_URLNoPrefect Cloud API URL. Required for the prefect backend.
AUTH_MCP_BACKENDNoBackend to use: 'file' (default) or 'prefect'.file
AUTH_MCP_MASTER_KEYNoMaster key used to derive encryption key for the file backend. Required for the default file backend. Generate with `python -c "import secrets; print(secrets.token_urlsafe(32))"`.
AUTH_MCP_VAULT_PATHNoPath to the encrypted vault file for the file backend. Default is .auth_vault.json..auth_vault.json

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tasks
{
  "list": {},
  "cancel": {},
  "requests": {
    "tools": {
      "call": {}
    },
    "prompts": {
      "get": {}
    },
    "resources": {
      "read": {}
    }
  }
}
tools
{
  "listChanged": true
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
auth_setA

Create or update an API key / credential in the vault.

Args: name: Unique name for the credential, e.g. "openai" or "stripe-live". value: The secret value (API key, token, password...). Never echoed back. description: Optional human-readable note shown in listings.

Returns: Metadata for the saved credential (with a masked preview only).

auth_getA

Retrieve a credential value.

Args: name: Credential name. mask: If True (default), return a masked form (********last4). Set to False to get the full value.

Returns: The credential value (masked or full).

auth_listA

List all stored credentials (names + metadata only, never values).

auth_searchA

Search stored credentials by name or description (metadata only).

auth_recommendA

Ask goose's AI to pick the best stored credential for a task.

This tool uses MCP sampling: it sends the task plus the list of available credentials (names + descriptions only — values never leave the vault) back to goose's LLM, which returns the single best match and the reasoning. Retrieve the value afterwards with auth_get(name, mask=False).

If the client does not support sampling, the tool degrades gracefully and returns the full list so the caller can choose manually.

Args: task: What the credential will be used for, e.g. "call OpenAI to summarize this email thread".

Returns: recommendation (credential name or None), reasoning, and available (all credential names).

auth_deleteA

Permanently delete a credential from the vault.

Args: name: Credential name.

Returns: Confirmation.

auth_healthA

Health check for the auth-mcp server.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/KB01111/auth-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server