Soma
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| RUST_LOG | No | Log filter. Stdio mode suppresses noisy logs to avoid corrupting JSON-RPC. | info |
| SOMA_NOAUTH | No | Trusted-gateway non-loopback no-auth mode. | false |
| SOMA_API_KEY | No | Bearer token or upstream service API key. | |
| SOMA_API_URL | No | Deployed platform API or upstream service URL. Empty selects stub/offline behavior. | |
| SOMA_MCP_HOST | No | HTTP server bind host. | 127.0.0.1 |
| SOMA_MCP_PORT | No | HTTP server bind port. | 40060 |
| SOMA_MCP_TOKEN | No | Static bearer token. | |
| SOMA_MCP_NO_AUTH | No | Disable auth for loopback development. | false |
| SOMA_PROVIDER_DIR | No | Directory scanned for drop-in provider files. | providers |
| SOMA_MCP_AUTH_MODE | No | bearer or oauth. | bearer |
| SOMA_MCP_PUBLIC_URL | No | Public URL for OAuth metadata and callbacks. | |
| SOMA_MCP_SERVER_NAME | No | MCP server name advertised to clients. | soma |
| SOMA_MCP_ALLOWED_HOSTS | No | Extra comma-separated Host header values. | |
| SOMA_MCP_TRACE_HEADERS | No | Trusted inbound HTTP trace extraction: off, trusted, or trusted-with-baggage. | off |
| SOMA_MCP_ALLOWED_ORIGINS | No | Extra comma-separated CORS origins. | |
| SOMA_MCP_AUTH_ADMIN_EMAIL | No | Initial/admin OAuth email. | |
| SOMA_MCP_GITHUB_CLIENT_ID | No | GitHub OAuth App client ID. | |
| SOMA_MCP_GOOGLE_CLIENT_ID | No | Google OAuth client ID. | |
| SOMA_MCP_AUTHELIA_CLIENT_ID | No | Authelia OIDC client ID. | |
| SOMA_MCP_AUTHELIA_ISSUER_URL | No | HTTPS Authelia OIDC issuer URL. | |
| SOMA_MCP_GITHUB_CLIENT_SECRET | No | GitHub OAuth App client secret. | |
| SOMA_MCP_GOOGLE_CLIENT_SECRET | No | Google OAuth client secret. | |
| SOMA_MCP_AUTH_DEFAULT_PROVIDER | No | Provider used when a request omits provider; automatic priority is Google, Authelia, GitHub. | first configured |
| SOMA_MCP_AUTHELIA_CLIENT_SECRET | No | Authelia OIDC client secret. |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dinglebear-ai/soma'
If you have feedback or need assistance with the MCP directory API, please join our Discord server