MCP Sentinel
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| APP_ENV | No | Runtime environment: development, staging, production, or test. | development |
| API_PORT | No | Port bound by the FastAPI REST server. | 8000 |
| WEB_PORT | No | Port bound by the Next.js web console. | 3000 |
| LOG_LEVEL | No | Logging verbosity: DEBUG, INFO, WARNING, ERROR, or CRITICAL. | INFO |
| DATABASE_URL | Yes | PostgreSQL connection string, e.g. postgresql://user:pass@host:5432/db. | |
| MCP_TRANSPORT | No | MCP transport mode: stdio or sse. | stdio |
| JWT_SECRET_KEY | Yes | Master JWT secret key for access token signing. | |
| NOTION_API_KEY | No | Notion Internal Integration Token starting with secret_ or ntn_. | |
| SESSION_SECRET | Yes | Master session secret key, minimum 32 characters, used for cookie signing. | |
| MCP_SERVER_NAME | No | Human-readable name announced by the FastMCP server. | SentinelCore |
| DB_POOL_MAX_SIZE | No | Maximum async connection pool connections. | 10 |
| DB_POOL_MIN_SIZE | No | Minimum async connection pool connections. | 2 |
| ENABLE_TEST_AUTH | No | Allows test session switching in development/staging. Must be false in production. | true |
| GOOGLE_CLIENT_ID | No | Google Cloud Console OAuth 2.0 Client ID for PKCE login. | |
| NOTION_CLIENT_ID | No | Optional Notion OAuth 2.0 Client ID. | |
| NEXT_PUBLIC_API_URL | No | Public API URL accessed by the web console frontend. | http://localhost:8000 |
| APPROVAL_HMAC_SECRET | Yes | Secret key used exclusively for HMAC-SHA256 signing of approval tickets. | |
| GOOGLE_CLIENT_SECRET | No | Google Cloud Console OAuth 2.0 Client Secret. | |
| NOTION_CLIENT_SECRET | No | Optional Notion OAuth 2.0 Client Secret. | |
| NOTION_WRITE_ENABLED | No | Explicit circuit breaker for destructive Notion tools such as archive_page. | false |
| SUPABASE_DATABASE_URL | No | Optional Supabase transaction pooler connection string with TLS. | |
| ALLOWED_GOOGLE_DOMAINS | No | Comma-separated list of allowed email domains, e.g. company.com. | |
| JWT_EXPIRATION_MINUTES | No | JWT bearer token validity lifetime in minutes. | 60 |
| DB_POOL_TIMEOUT_SECONDS | No | Connection acquisition timeout in seconds. | 10.0 |
| DB_COMMAND_TIMEOUT_SECONDS | No | Individual SQL query execution timeout in seconds. | 15.0 |
| APPROVAL_TICKET_TTL_SECONDS | No | Staged approval ticket expiration window in seconds. | 3600 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessOutdated data