mcp-airlock
by Shalimov04
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AIRLOCK_ENV | No | Environment name, picks the tier column in the policy. `--env` does the same. | |
| AIRLOCK_SECRET | No | Key for signing confirmation tokens. Random per process if unset, which means a restart forgets pending confirmations. Set it if you run more than one replica. | |
| AIRLOCK_JWKS_URL | No | Verify bearer tokens against an OIDC provider (RS256/ES256). Takes precedence over the shared secret. | |
| AIRLOCK_AUDIT_DSN | No | Postgres DSN for the audit log, in addition to the JSONL file. | |
| AIRLOCK_STORE_DSN | No | Postgres DSN for the shared state: used confirmation keys, approvals, blast-radius counters. Without it the state lives in process memory. | |
| AIRLOCK_JWT_ISSUER | No | Verify bearer tokens against an OIDC provider (RS256/ES256). Takes precedence over the shared secret. | |
| AIRLOCK_JWT_SECRET | No | Verify bearer tokens with HS256. `sub` becomes the principal, `groups` the groups. | |
| AIRLOCK_PUBLIC_URL | No | Base URL for approve links. Default `http://127.0.0.1:9000`. | http://127.0.0.1:9000 |
| AIRLOCK_GROUPS_CLAIM | No | Claim to read groups from. Default `groups`. | groups |
| AIRLOCK_JWT_AUDIENCE | No | Set the audience; without it any token from that provider is accepted. | |
| AIRLOCK_TELEGRAM_CHAT | No | Chat id for the Telegram case. | |
| AIRLOCK_UPSTREAM_AUTH | No | Value of the `Authorization` header sent to the upstream. This is the proxy's own credential; the caller's identity travels in `_meta` instead. | |
| AIRLOCK_APPROVAL_WEBHOOK | No | Slack-style incoming webhook, or a Telegram `bot<token>/sendMessage` URL. Confirmation prompts are posted there with an approve link. | |
| AIRLOCK_TRUST_PRINCIPAL_HEADER | No | Set to `1` to accept `X-Airlock-Principal` and `X-Airlock-Groups`. Off by default. Only turn it on behind a gateway that sets those headers itself and strips them from clients. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessResponsive