aegisgate-mcp
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_TLS_KEY | No | Server private key file (PEM) (equivalent to --tls-key). Empty by default. | |
| MCP_ML_MODEL | No | Path to ONNX model file (equivalent to --ml-model). | ./models/threat_cnn_bilstm.onnx |
| MCP_TLS_CERT | No | Server certificate file (PEM) (equivalent to --tls-cert). Empty by default. | |
| MCP_AUDIT_LOG | No | Audit log file path (equivalent to --audit). Empty by default. | |
| MCP_BLOCK_PII | No | Block responses containing PII (equivalent to --block-pii). | true |
| MCP_BLOCK_XSS | No | Block responses containing XSS (equivalent to --block-xss). | true |
| MCP_ML_SHADOW | No | ML shadow mode: log predictions but never block (equivalent to --ml-shadow). | false |
| MCP_TRANSPORT | No | Transport mode: tcp, stdio, or http (Streamable HTTP) (equivalent to --transport). | tcp |
| MCP_AUTH_TOKEN | No | Bearer token for authentication (equivalent to --token). Empty by default. | |
| MCP_DEMO_TOOLS | No | Register demo tools (ping, system_info, echo) (equivalent to --demo). | false |
| MCP_ML_ENABLED | No | Enable neural threat detection (L3, requires CGO build) (equivalent to --ml). | false |
| MCP_REDACT_PII | No | Redact PII from responses (equivalent to --redact-pii). | false |
| MCP_CONFIG_FILE | No | JSON config file path (equivalent to --config). Empty by default. | |
| MCP_HEALTH_ADDR | No | Health endpoint listen address; empty = disabled (equivalent to --health-addr). Empty by default. | |
| MCP_SERVER_ADDR | No | Listen address for TCP mode (equivalent to --addr). | :8081 |
| MCP_TLS_ENABLED | No | Enable TLS transport (equivalent to --tls). | false |
| MCP_EXEC_TIMEOUT | No | Tool execution timeout in seconds (equivalent to --exec-timeout). | 30 |
| MCP_MAX_SESSIONS | No | Maximum concurrent sessions (equivalent to --max-sessions). | 50 |
| MCP_ML_THRESHOLD | No | ML threat score threshold (0.0-1.0) (equivalent to --ml-threshold). | 0.50 |
| MCP_BLOCK_SECRETS | No | Block responses containing secrets (equivalent to --block-secrets). | true |
| MCP_TLS_CLIENT_CA | No | CA bundle for client certs, enables mTLS (equivalent to --tls-client-ca). Empty by default. | |
| MCP_RATE_LIMIT_RPM | No | Rate limit in requests per minute (equivalent to --rate-limit). | 60 |
| MCP_REDACT_ENABLED | No | Enable secret/PII redaction (equivalent to --redact). | false |
| MCP_REDACT_SECRETS | No | Redact secrets from responses (equivalent to --redact-secrets). | true |
| MCP_SCAN_RESPONSES | No | Enable response scanning (equivalent to --scan-responses). | true |
| MCP_MAX_CONNECTIONS | No | Maximum concurrent TCP connections, -1 = unlimited (equivalent to --max-connections). | 1000 |
| MCP_TLS_MIN_VERSION | No | Minimum TLS version: 1.2 or 1.3 (equivalent to --tls-min-version). | 1.2 |
| MCP_REDACT_PLACEHOLDER | No | Redaction placeholder text (equivalent to --redact-placeholder). | [REDACTED] |
| MCP_BLOCK_PROMPT_INJECT | No | Block responses containing prompt injection (equivalent to --block-prompt-inject). | true |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues