pi-as-mcp
by Star-233
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PI_AS_MCP_DENY | No | Paths refused even inside the root. Default .ssh,.aws,.gnupg,.git-credentials,.netrc,.config/gcloud. | |
| PI_AS_MCP_HOST | No | HTTP listener host. Default 127.0.0.1. | |
| PI_AS_MCP_HTTP | No | Serve Streamable HTTP instead of stdio. Set to 1 to enable. Default off. | |
| PI_AS_MCP_PORT | No | HTTP listener port. Default 8777. A port already in use is a hard error. | |
| PI_AS_MCP_ROOT | No | Sandbox root. Every path argument is confined here. Defaults to the current working directory. | |
| PI_AS_MCP_HUMAN | No | Expose the human channel: human_say/human_ask/human_wait and the approval gate. The web UI comes with it, but is not exclusive to it — --oauth starts the UI too. Set to 1 to enable. Default off. | |
| PI_AS_MCP_OAUTH | No | Serve an OAuth 2.1 authorization server in front of /mcp, and run the UI that approves it. Needs --http. Set to 1 to enable. Default off (on in pimcp). | |
| PI_AS_MCP_TOKEN | No | Bearer token. Set this if you expose the port, unless you use --oauth. Default none. | |
| PI_AS_MCP_TOOLS | No | Comma-separated subset of tools to expose. powershell is Windows-only. Default 7 on Linux, 8 on Windows. | |
| PI_AS_MCP_ISSUER | No | The URL clients reach, and the identity the authorization server advertises. Only with --oauth. Must be https, or a loopback http address. Default the tunnel hostname, else http://127.0.0.1:<port>. | |
| PI_AS_MCP_APPROVE | No | Tools that require human approval, e.g. bash. Needs --human. With no human there is nobody to ask, so the bridge refuses to start instead of auto-approving. Default none. | |
| PI_AS_MCP_UI_HOST | No | The web UI host. Runs with --human or --oauth; ignored without either. Default 127.0.0.1. | |
| PI_AS_MCP_UI_PORT | No | The web UI port. Runs with --human or --oauth; ignored without either. Default 8790. | |
| PI_AS_MCP_BLOCK_MS | No | Max time human_ask/human_wait block before returning no_message. Default 90000. | |
| PI_AS_MCP_UI_TOKEN | No | Token for the UI. Set it if you bind the UI to anything but loopback — with --oauth, the UI is what can grant access here. Default none. | |
| PI_AS_MCP_OAUTH_REDIRECT | No | The addresses a hand-configured client may return to (comma-separated), named before it ever asks. Without this the address is not known in advance: the first one the client sends is shown on the approval card, and your click is what allows it. Only with --oauth. Default none. | |
| PI_AS_MCP_OAUTH_CLIENT_ID | No | Use this credential pair instead of minting one, so a restart does not invalidate a pair a client already holds. Both together, and only with --oauth. Default minted per run. | |
| PI_AS_MCP_OAUTH_CLIENT_SECRET | No | Use this credential pair instead of minting one, so a restart does not invalidate a pair a client already holds. Both together, and only with --oauth. Default minted per run. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues