Skip to main content
Glama

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
HOSTNoBind address. Project default differs from code default to provide a working local/dev setup.0.0.0.0
REQUIRE_JTINoRequire JTI claim in tokens for revocation support.true
DATABASE_URLNoSQLAlchemy connection URL, e.g. `sqlite:///./mcp.db` or `postgresql+psycopg://user:password@localhost:5432/mcp`.sqlite:///./mcp.db
AUTH_REQUIREDNoEnable authentication. Required for UAID cross-gateway routing.
JWT_SECRET_KEYYesHMAC secret for signing JWTs (32+ chars). Required in every environment — including local development. The gateway will not start without it. Generate with `python3 -m mcpgateway.scripts.init_secrets`.
SECURE_COOKIESNoSet `false` for HTTP (non-HTTPS) dev.false
BASIC_AUTH_USERNoUsername for HTTP Basic auth.admin
UAID_FORWARD_AUTHNoForward the user's bearer token via the Authorization header for cross-gateway UAID routing.
BASIC_AUTH_PASSWORDNoPassword for HTTP Basic auth. Required — no default; set via `make init-secrets-patch-env`.
PLATFORM_ADMIN_EMAILNoEmail for bootstrap admin user.admin@example.com
UAID_ALLOWED_DOMAINSNoDomain allowlist for UAID cross-gateway routing, e.g. `["gateway1.example.com", "gateway2.example.com"]`. Empty allowlist blocks all cross-gateway routing.
MCPGATEWAY_UI_ENABLEDNoEnable Admin UI dashboard.true
AUTH_ENCRYPTION_SECRETYesPassphrase for encrypting stored credentials. Required in every environment — including local development. The gateway will not start without it. Generate with `python3 -m mcpgateway.scripts.init_secrets`.
CONTENT_MAX_PROMPT_SIZENoMaximum prompt template size (bytes). Prevents DoS attacks and ensures system stability.10240
PLATFORM_ADMIN_PASSWORDNoPassword for bootstrap admin user. Required — set a strong value before first run.
PLATFORM_ADMIN_FULL_NAMENoDisplay name for bootstrap admin.Admin User
REQUIRE_TOKEN_EXPIRATIONNoRequire exp claim in tokens.true
CONTENT_MAX_RESOURCE_SIZENoMaximum resource content size (bytes). Prevents DoS attacks and ensures system stability.102400
PUBLIC_REGISTRATION_ENABLEDNoAllow public user self-registration.false
MCPGATEWAY_ADMIN_API_ENABLEDNoEnable Admin API endpoints.true

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription

No tools

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources