clavis-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| call_serviceA | RECOMMENDED: Make an API call with server-side credential injection. The credential is fetched from the Clavis vault and injected into the upstream request server-side — the raw API key never enters this conversation. Prefer this over get_credentials: it eliminates prompt-injection exfiltration as an attack vector, because there is no secret in context to exfiltrate. |
| get_credentialsA | LEGACY — returns raw credential data into this conversation. Prefer call_service for security: call_service injects credentials server-side so the raw API key is never exposed to the model. Use this only when you must hold the token itself (e.g. handing it to a library that cannot be proxied). Clavis handles token refresh and rotation automatically. |
| list_servicesA | List all services configured in Clavis for the authenticated developer. |
| check_credential_statusA | Check the validity and rate-limit status of credentials for a service without making any external API call. Queries only the Clavis vault (database + Redis). Returns validity, expiry, rate-limit headroom, and last-used timestamp. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose: call_service proxies requests with server-side credential injection, get_credentials returns raw tokens for non-proxy use, list_services enumerates configured services, and check_credential_status inspects vault state without external calls. The overlap between call_service and get_credentials is explicitly addressed with usage guidance, so an agent can select correctly.
All tool names follow a consistent verb_noun pattern in lower_snake_case: call_service, get_credentials, list_services, check_credential_status. The verbs are distinct and clearly map to each tool's function.
With four tools, the set is tightly focused on core Clavis operations: using credentials, retrieving them, listing services, and checking status. This is the right granularity for a credential-management server—not bloated, not thin.
The tool surface covers the full lifecycle of interacting with Clavis-managed credentials: calling an upstream service, retrieving a raw credential when necessary, discovering available services, and checking status/rate limits. Missing features like credential creation or rotation are handled automatically by Clavis, so these are not gaps for the agent.