Schema | MCP Credentials Broker

MCP Credentials Broker

Describes the environment variables required to run the server.

Name	Required	Description
`JWT_SECRET`	No	Secret key for signing broker-issued JWT tokens (recommended in production)
`OKTA_DOMAIN`	No	Okta domain (e.g., your-org.okta.com)
`GCP_CLIENT_ID`	No	OAuth client ID for Google Cloud Platform
`OKTA_CLIENT_ID`	No	OAuth client ID for Okta
`AZURE_CLIENT_ID`	No	OAuth client ID for Azure
`GITHUB_CLIENT_ID`	No	OAuth client ID for GitHub
`GCP_CLIENT_SECRET`	No	OAuth client secret for Google Cloud Platform
`OKTA_CLIENT_SECRET`	No	OAuth client secret for Okta
`AZURE_CLIENT_SECRET`	No	OAuth client secret for Azure
`GITHUB_CLIENT_SECRET`	No	OAuth client secret for GitHub

Features and capabilities supported by this server

Capability	Details
`tools`	{}

Functions exposed to the LLM to take actions

Name	Description
get_secretA	Issues a short-lived secret reference for a stored secret. Returns a reference ID (not the raw secret) with an expiry time. The reference can be used to retrieve the actual secret value within the TTL period.
mint_tokenA	Generates a short-lived, scoped token for a specific provider (OAuth, GitHub, AWS STS, GCP, Azure). The token is automatically revoked after the TTL expires.
revoke_tokenA	Immediately revokes a previously issued token, making it invalid for any further use.
store_secretA	Store a secret in the credentials broker. This secret can then be referenced using get_secret.
start_oauth_flowA	Authenticate a provider via browser-based OAuth2 web flow. Opens the browser for the user to log in — no client_id or client_secret needed from you. Stores the resulting access token under secret_name for use with get_secret/resolve_secret.
resolve_secretA	Resolve a secret reference ID (from get_secret) to get the actual token value. Use this to pass the real token to another MCP tool.
get_broker_statsA	Get statistics about the credentials broker including active tokens, secret references, and audit log summary.

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ars-system/mcp-credentials-broker'

If you have feedback or need assistance with the MCP directory API, please join our Discord server