neuvector-mcp
by darthzen
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NV_PASSWORD | No | Password for password authentication. Required when NV_AUTH_MODE=password. | |
| NV_TOOLSETS | No | Comma-separated list; see Toolsets. | |
| NV_USERNAME | No | Username for password authentication. Required when NV_AUTH_MODE=password. | |
| NV_AUTH_MODE | No | Authentication mode: apikey or password. | apikey |
| NV_CA_BUNDLE | No | Path to a CA bundle. Takes precedence over NV_VERIFY_TLS. | |
| NV_HTTP_HOST | No | HTTP transport bind address. | 0.0.0.0 |
| NV_HTTP_PATH | No | HTTP transport request path. | /mcp |
| NV_HTTP_PORT | No | HTTP transport bind port. | 8080 |
| NV_LOG_LEVEL | No | Standard Python log level name. | INFO |
| NV_MAX_ITEMS | No | Hard cap on any list tool's page size. | 200 |
| NV_READ_ONLY | No | true refuses every mutation and does not register mutating toolsets at all. | true |
| NV_TRANSPORT | No | Transport: stdio or http. | stdio |
| NV_LOG_FORMAT | No | Log format: json or console. | json |
| NV_VERIFY_TLS | No | Set false for the controller's default self-signed cert. | true |
| NV_API_ACCESS_KEY | No | API key's apikey_name. Required when NV_AUTH_MODE=apikey. | |
| NV_API_SECRET_KEY | No | API key's apikey_secret. Required when NV_AUTH_MODE=apikey. | |
| NV_AUDIT_LOG_PATH | No | Optional second sink for audit records. | |
| NV_CONTROLLER_URL | No | Controller REST base URL. Must start http:// or https://. A trailing slash is stripped. | https://127.0.0.1:10443 |
| NV_REQUEST_TIMEOUT_S | No | Timeout for normal calls, in seconds. | 30 |
| NV_ALLOWED_NAMESPACES | No | When set, mutations targeting a namespace outside this list are refused. | |
| NV_ALLOW_UNDOCUMENTED | No | Gates tools that use routes absent from the controller's Swagger. | false |
| NV_HTTP_BEARER_TOKENS | No | Required for http. token:scope|scope,token2:scope. | |
| NV_MAX_RESPONSE_CHARS | No | Truncation budget per tool result. | 60000 |
| NV_REQUIRE_CONFIRM_TOKEN | No | false removes the two-step handshake. | true |
| NV_LONG_REQUEST_TIMEOUT_S | No | Timeout for scan, bench and repository-scan calls, in seconds. | 300 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/darthzen/neuvector-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server