Schema | x-reply-guard-mcp

x-reply-guard-mcp

Describes the environment variables required to run the server.

Name	Required	Description	Default
`X_API_KEY`	Yes	X OAuth 1.0a API key for the account.
`X_USER_ID`	Yes	Numeric User ID of the X account.
`ACCESS_AUD`	Yes	Cloudflare Access application Audience (AUD) tag. Required for admin routes.
`X_USERNAME`	Yes	X username without the @ prefix.
`PUBLISH_MODE`	No	Publishing mode: approval (default if omitted) or auto. Other values refuse writes.	approval
`X_API_SECRET`	Yes	X OAuth 1.0a API secret for the account.
`X_ACCESS_TOKEN`	Yes	X OAuth 1.0a user-context access token.
`APPROVAL_SECRET`	Yes	Server-only HMAC-SHA256 signing key for approval links.
`MCP_BEARER_TOKEN`	Yes	Shared /mcp Bearer credential, compared in constant time after fixed-length SHA-256 hashing.
`DRAFT_TTL_MINUTES`	No	Positive integer draft time-to-live in minutes.	30
`MAX_POSTS_PER_DAY`	No	Positive integer maximum posts per UTC calendar day.	20
`ACCESS_TEAM_DOMAIN`	Yes	Cloudflare Zero Trust team hostname, e.g. your-team.cloudflareaccess.com, without scheme or path. Required for admin routes.
`MAX_POSTS_PER_HOUR`	No	Positive integer maximum posts per UTC clock hour.	5
`ACCESS_ALLOWED_EMAILS`	No	Optional comma-separated email allowlist, trimmed and case-insensitive. If set, the Access JWT email must match; an empty list denies everyone.
`X_ACCESS_TOKEN_SECRET`	Yes	X OAuth 1.0a user-context access token secret.

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Server capabilities have not been inspected yet.

Functions exposed to the LLM to take actions

Name	Description
No tools

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

This server cannot be deployed

ActivityMaintained

ResponsivenessNo issues