mcp-review
Officialby apatureai
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | Listener port | 8080 |
| MCP_PATH | No | MCP endpoint path | /mcp |
| DATABASE_URL | Yes | Postgres for durable jobs and the verified-target registry; migrations run at boot | |
| MCP_JWKS_URL | Yes | Issuer JWKS endpoint used to verify token signatures | |
| ENGINE_BASE_URL | Yes | Judgment engine async job API origin | |
| MCP_RESOURCE_URL | Yes | This server's public resource id, the expected token aud | |
| MCP_TOKEN_ISSUER | Yes | Expected token iss | |
| MCP_ALLOWED_HOSTS | No | Permitted Host headers (DNS-rebinding defense) | host of MCP_RESOURCE_URL |
| ENGINE_HMAC_SECRET | Yes | Shared secret signing service-to-service calls | |
| MCP_MAX_BODY_BYTES | No | Request body ceiling; hard maximum 1 MiB | 262144 |
| MCP_BODY_TIMEOUT_MS | No | Body-read timeout | 30000 |
| MCP_TEST_DATABASE_URL | No | Test-only. When set, runs the Postgres migration test instead of skipping it | |
| MCP_AUTHORIZATION_SERVERS | Yes | Comma-separated issuer URLs published in RFC 9728 discovery | |
| MCP_MAX_IN_FLIGHT_PER_PRINCIPAL | No | Concurrent authenticated requests per principal; hard maximum 64 | 8 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/apatureai/bastion'
If you have feedback or need assistance with the MCP directory API, please join our Discord server