Labby
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LABBY_LOG | No | Tracing filter. | |
| LABBY_LOG_DIR | No | Optional rolling JSON file log directory. | |
| LABBY_AUTH_MODE | No | Authentication mode: 'bearer' or 'oauth'. Default is 'bearer'. | bearer |
| LABBY_LOG_COLOR | No | Non-TTY color policy. | |
| LABBY_LOG_FORMAT | No | Text or json format for logging. | |
| LABBY_PUBLIC_URL | No | Public base URL for OAuth metadata, issuer/audience, callbacks, and allowed-host derivation. | |
| LABBY_ADMIN_ENABLED | No | Runtime opt-in for the lab_admin tool. | |
| LABBY_MCP_HTTP_HOST | No | Host to bind the HTTP server. Default is '127.0.0.1'. | 127.0.0.1 |
| LABBY_MCP_HTTP_PORT | No | Port to bind the HTTP server. Default is '8765'. | 8765 |
| LABBY_MCP_TRANSPORT | No | Transport type for the MCP server. Default is 'http'. | http |
| LABBY_MCP_HTTP_TOKEN | No | Static bearer token for protected admin/API/MCP routes. If not provided, a random token is generated and stored in ~/.labby/.env. | |
| LABBY_WEB_ASSETS_DIR | No | Override static Labby export directory. | |
| LABBY_ACTOR_KEY_SECRET | No | Stable secret for redacted actor correlation in logs. | |
| LABBY_AUTH_ADMIN_EMAIL | No | Bootstrap admin email. Required in OAuth mode. | |
| LABBY_GOOGLE_CLIENT_ID | No | Google OAuth client ID. Required when LABBY_AUTH_MODE=oauth. | |
| LABBY_GOOGLE_CLIENT_SECRET | No | Google OAuth client secret. Required when LABBY_AUTH_MODE=oauth. | |
| LABBY_OAUTH_ENCRYPTION_KEY | No | Base64 32-byte key required for encrypted upstream OAuth credentials. Rotation requires reauthorizing affected upstreams. | |
| LABBY_WEB_UI_AUTH_DISABLED | No | Development-only browser auth bypass. |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dinglebear-ai/labby'
If you have feedback or need assistance with the MCP directory API, please join our Discord server