Taranis NG MCP
Officialby SK-CERT
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| TARANIS_API_KEY | No | User-owned Core API key (required in API-key mode). | |
| TARANIS_BASE_URL | Yes | Absolute HTTP(S) Core URL. It must end exactly once with /api/v1; a trailing slash is accepted and removed. | |
| TARANIS_PASSWORD | No | Core password (required in password mode). | |
| TARANIS_USERNAME | No | Core username (required in password mode). | |
| TARANIS_AUTH_MODE | No | Authentication mode: password or api_key. | password |
| TARANIS_CA_BUNDLE | No | Path to an existing CA bundle. When set, this bundle is used for TLS verification regardless of TARANIS_VERIFY_TLS. | |
| TARANIS_LOG_LEVEL | No | Logging threshold: DEBUG, INFO, WARNING, ERROR, or CRITICAL (case-insensitive). | INFO |
| TARANIS_VERIFY_TLS | No | Whether to verify the Core server certificate. | true |
| TARANIS_GET_RETRIES | No | Additional GET/HEAD retries after the initial attempt; must be 0 or greater. | 2 |
| TARANIS_MCP_CATALOG | No | Tool catalog profile: gateway, direct, or hybrid. | gateway |
| TARANIS_MCP_MODULES | No | Comma-separated legacy coarse domain/audience selectors, such as assess.usage,assess.admin. | |
| TARANIS_ARTIFACT_DIR | No | Artifact storage directory. The generated default is $XDG_RUNTIME_DIR/taranis-mcp-<uid> when XDG_RUNTIME_DIR is set, otherwise the platform temporary directory with the same suffix. | |
| TARANIS_ARTIFACT_TTL | No | Artifact lifetime in seconds; must be at least 1. | 3600 |
| TARANIS_CORE_VERSION | No | Deployed Core version or commit asserted from deployment evidence and reported by system_check. | |
| TARANIS_MCP_TOOLSETS | No | Comma-separated capability toolsets to enable. | |
| TARANIS_MAX_PAGE_SIZE | No | Maximum permitted page size. Page sizes must satisfy 1 <= default <= maximum <= 200. | 200 |
| TARANIS_MCP_DEVELOPER | No | Add the read-only raw_get developer tool. | false |
| TARANIS_MCP_READ_ONLY | No | Remove every mutation from the effective catalog. | false |
| TARANIS_MCP_OPERATIONS | No | Comma-separated semantic operation names to add. | |
| TARANIS_MAX_CONCURRENCY | No | Maximum concurrent requests; must be at least 1. | 8 |
| TARANIS_MAX_CONNECTIONS | No | HTTP connection-pool limit; must be at least TARANIS_MAX_CONCURRENCY. | 16 |
| TARANIS_REQUEST_TIMEOUT | No | General HTTP request timeout in seconds; accepts a number. | 30 |
| TARANIS_ARTIFACT_TIMEOUT | No | HTTP timeout in seconds for artifact transfers; accepts a number. | 120 |
| TARANIS_AUTH_PROVIDER_ID | No | Positive ID of an enabled local or LDAP form provider to select for password login. When omitted, Core uses its local provider only. | |
| TARANIS_DEFAULT_PAGE_SIZE | No | Default number of records returned by paged operations. | 25 |
| TARANIS_ARTIFACT_MAX_BYTES | No | Maximum artifact size in bytes (25 MiB by default); must be at least 1. | 26214400 |
| TARANIS_METADATA_CACHE_TTL | No | Metadata cache lifetime in seconds; accepts a number. | 30 |
| TARANIS_RESPONSE_MAX_BYTES | No | Maximum ordinary response body size in bytes (5 MiB by default); must be at least 1. | 5242880 |
| TARANIS_MCP_EXCLUDE_OPERATIONS | No | Comma-separated semantic operation names to remove; exclusions take precedence over other selectors. | |
| TARANIS_MCP_ALLOW_LARGE_CATALOG | No | Allow direct/hybrid profiles to expose more than 25 tools. | false |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/SK-CERT/Taranis-NG-MCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server