AVEVA PI System MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_HTTP_BIND | No | HTTP transport bind address. Does not wildcard-bind by default. | |
| MCP_READ_ONLY | No | When true (default), the server runs read-only and refuses write tools. Set to false to allow writes. | |
| MCP_TRANSPORT | No | Transport to use for the MCP server. Use stdio for local clients (default stdio). | |
| PIWEBAPI_BASE_URL | Yes | The web address of your PI Web API service (e.g. https://pi-server.company.com/piwebapi). | |
| MCP_EDGE_AUTH_MODE | No | Inbound edge authentication mode required for HTTP transport (bearer token or mTLS). | |
| PIWEBAPI_AUTH_MODE | Yes | Tells the server how to log in. Must be either kerberos, basic, bearer, or anonymous. | |
| PIWEBAPI_BASIC_USER | No | Username for basic authentication (e.g. company_domain\service-username). | |
| PIWEBAPI_TLS_VERIFY | No | Non-production debugging escape hatch. Set to false to disable TLS verification. Rejected when NODE_ENV=production, over HTTP transport, or when combined with certificate pinning. | |
| MCP_EDGE_WRITE_ROLES | No | Caller role required for write-capable tools over HTTP transport. | |
| PIWEBAPI_TLS_CA_FILE | No | Path to a PEM CA file for private/internal certificate authorities. The server trusts the union of this file and the system's public roots. | |
| PIWEBAPI_KERBEROS_SPN | No | Kerberos Service Principal Name for the PI Web API server (e.g. HTTP/pi-web-api-server.company.com). | |
| PIWEBAPI_BEARER_ISSUER | No | OIDC issuer URL for bearer token authentication. | |
| MCP_BUILD_TOOLS_ALLOWED | No | Placeholder for MCP_BUILD_ALLOWED_DATABASES (see that property). | |
| MCP_BUILD_TOOLS_ENABLED | No | Set to true to enable AF build tools (pi.*). Off by default. Requires MCP_READ_ONLY=false and MCP_BUILD_ALLOWED_DATABASES. | |
| MCP_WRITE_TOOLS_ENABLED | No | Set to true to allow write-capable tools. Requires MCP_READ_ONLY=false. Default false. | |
| PIWEBAPI_BASIC_PASSWORD | No | Password for basic authentication. | |
| MCP_MODIFY_TOOLS_ENABLED | No | Set to true to enable AF modify tools. Off by default. Requires build tools and MCP_READ_ONLY=false. | |
| PIWEBAPI_ALLOW_ANONYMOUS | No | Set to true to allow anonymous access (no authentication). | |
| PIWEBAPI_BEARER_AUDIENCE | No | OIDC audience for bearer token authentication. | |
| PIWEBAPI_BEARER_CLIENT_ID | No | OIDC client ID for bearer token authentication. | |
| PIWEBAPI_SEND_CSRF_HEADER | No | Set to false to disable sending the X-Requested-With CSRF header on write requests (default true). | |
| MCP_BUILD_ALLOWED_DATABASES | No | Semicolon-separated list of AF databases allowed for build/modify tools, or a whole AF server with \\Server\*. | |
| PIWEBAPI_BEARER_CLIENT_SECRET | No | OIDC client secret for bearer token authentication. | |
| PIWEBAPI_BASIC_ALLOW_ANONYMOUS | No | Placeholder for anonymous access flag (see PIWEBAPI_ALLOW_ANONYMOUS). |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues