WinHelm MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Network interface to bind (127.0.0.1 loopback default, 0.0.0.0 for LAN/Tailscale). CLI flag: --host. Default: 127.0.0.1. | |
| PORT | No | Port number for the Web Gateway and MCP server. CLI flag: --port. Default: 8788. | |
| MCP_READ_ONLY | No | Enables read-only mode (strictly blocks file writing, shell execution, process killing, service modification, and mutating HTTP requests). CLI flag: --read-only. Default: false. | |
| MCP_AUTH_TOKEN | No | Bearer token for authentication. Rejects unauthenticated requests with HTTP 401. CLI flag: --auth. Default: none. | |
| WINHELM_PROFILE | No | Tool profile to load: minimal (6), core (15), dev (28), sysadmin (37), or full (38). CLI flag: --profile, -p. Default: full. | |
| MCP_ALLOWED_HOSTS | No | Comma-separated allowed hostnames for Host header validation (DNS Rebinding protection). Default: localhost,127.0.0.1,*.ts.net. | |
| WINHELM_TRANSPORT | No | Transport mode: http (Web Gateway + SSE) or stdio. CLI flag: --transport. Default: http. | |
| MCP_BLOCKED_COMMANDS | No | Additional comma-separated commands to block from execution. Default: format-volume, format-disk, clear-disk, stop-computer, restart-computer, rmdir /s /q c:\\, del /f /s /q c:\\. | |
| MCP_ALLOWED_DIRECTORIES | No | Comma-separated directory paths permitted for file access (e.g. "D:\\mcp,C:\\Workspace"). Empty = block all filesystem operations (fail-closed). CLI flag: --allowed-dirs. Default: [] (block all). |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues