STMA
Officialby Matte-AI-LLC
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Bind address (default 0.0.0.0 in production, localhost otherwise) | |
| PORT | No | HTTP port (default 3000) | 3000 |
| AUTH_2FA | No | 1 forces email sign-in codes on, 0 off. Default: on when RESEND_API_KEY is set. Also gates password-change confirmation and self-service reset | |
| BASE_URL | No | Public origin, used for OAuth redirects, invite links and snippets. Required in production. | |
| MAIL_FROM | No | Sender address (default STMA <noreply@stma.ai>) | STMA <noreply@stma.ai> |
| SITE_MODE | No | teaser makes the signed-out site pre-launch: the landing page says the platform is an invite-only private beta and points at the MCP docs, and the guide drops the sections about a console a visitor cannot reach. Signed-in members get the full app and the full guide. | |
| AUTH_LOCAL | No | Local username+password accounts (default on; 0 disables) | |
| PGLITE_DIR | No | Embedded database directory (default .data/pglite) | .data/pglite |
| DEMO_LOGINS | No | Credentials printed on the sign-in page of a throwaway environment: email:password[:label], comma separated, up to 8. Never set on production. | |
| EMBEDDED_DB | No | 1 allows production on the embedded database — single instance, persist packages/server/.data | |
| STMA_HOSTED | No | 1 makes plan limits apply. Unset means this is your instance and nothing is metered. | |
| ADMIN_EMAILS | No | Comma-separated operator emails for /admin. Works alongside ADMIN_USERNAMES. | |
| DATABASE_URL | No | Postgres connection string. Unset → embedded PGlite (dev, or prod with EMBEDDED_DB=1). Required in production unless EMBEDDED_DB=1. | |
| SIGNUPS_OPEN | No | 0 closes new local account registration | |
| AUTH_DEV_MODE | No | 1 forces the dev login form. Auto-enabled outside production when OAuth is not configured. | |
| RESEND_API_KEY | No | Resend API key for account emails (sign-in codes, password reset). Without it codes are only logged and email 2FA defaults off | |
| ADMIN_USERNAMES | No | Comma-separated operator usernames for /admin. Unset → /admin is a plain 404. | |
| GITHUB_CLIENT_ID | No | Optional GitHub OAuth client ID; callback URL is {BASE_URL}/auth/github/callback | |
| SESSION_TTL_DAYS | No | Web session lifetime (default 30) | 30 |
| AGENT_STALE_MINUTES | No | Mark active agent runs stale after no heartbeat (default 3) | 3 |
| NOTIFY_MAX_PER_HOUR | No | Hard cap on notification emails per person per hour (default 6) | 6 |
| ERROR_RETENTION_DAYS | No | Purge operator error-log entries older than this (default 30; 0 disables the age purge) | 30 |
| GITHUB_CLIENT_SECRET | No | Optional GitHub OAuth client secret | |
| SESSION_RETENTION_DAYS | No | Purge resolved sessions older than this (default 0 = keep the archive forever) | 0 |
| ACTIVITY_RETENTION_DAYS | No | Purge activity events, the agent run trail (agent_events) and announcements older than this (default 180; 0 disables the age purge). Ignored for the first two when STMA_HOSTED=1. | 180 |
| NOTIFY_DEBOUNCE_SECONDS | No | Wait this long before emailing about a thread so a burst of replies becomes one message (default 120) | 120 |
| SNAPSHOT_RETENTION_DAYS | No | Purge snapshots older than this (default 90, 0 disables). Also bounds stored preflight results. | 90 |
| AGENT_CLAIM_LEASE_MINUTES | No | Work-claim lease refreshed by heartbeat (default 5) | 5 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Matte-AI-LLC/stma'
If you have feedback or need assistance with the MCP directory API, please join our Discord server