Schema | Flash

Flash

Overview Schema Source Related Servers Score Discussions Admin

Server Configuration

Describes the environment variables required to run the server.

Name	Required	Description	Default
`FLASH_BIND`	No	Listen address.	127.0.0.1:8437
`FLASH_BASE_URL`	Yes	The public origin (https://cards.example.com). Passkeys, OAuth and every link in a mail are minted against it, so it must be what browsers actually see. A hostname, not an IP address.
`FLASH_DATA_DIR`	No	The SQLite database, import scratch space and media. Back this directory up.	./data
`RESEND_API_KEY`	No	Outbound mail through Resend, the one provider supported today. The core sends exactly one kind of mail, the password-reset link, so without this there is simply no self-service reset. Must be set together with FLASH_EMAIL_FROM.
`FLASH_EMAIL_FROM`	No	Outbound mail through Resend, the one provider supported today. The core sends exactly one kind of mail, the password-reset link, so without this there is simply no self-service reset. Must be set together with RESEND_API_KEY.
`FLASH_DEV_MAIL_LOG`	No	Instead of a provider, log the mail (and its link) to stdout. Set to 1 to enable.
`FLASH_SUPPORT_EMAIL`	No	Shown on the pages that print a contact address.
`FLASH_MEDIA_R2_BUCKET`	No	S3-compatible bucket for media storage. Must be set together with the other FLASH_MEDIA_R2_* variables.
`FLASH_CLIENT_IP_HEADER`	No	Header holding the real client address when a proxy is in front (x-real-ip, cf-connecting-ip). Unset uses the TCP peer.
`FLASH_MEDIA_R2_ENDPOINT`	No	S3-compatible endpoint for media storage. Must be set together with the other FLASH_MEDIA_R2_* variables.
`FLASH_MEDIA_R2_ACCESS_KEY_ID`	No	Access key ID for S3-compatible media storage. Must be set together with the other FLASH_MEDIA_R2_* variables.
`FLASH_MEDIA_R2_SECRET_ACCESS_KEY`	No	Secret access key for S3-compatible media storage. Must be set together with the other FLASH_MEDIA_R2_* variables.

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

Name	Description
No tools

Prompts

Interactive templates invoked by user choice

Name	Description
No prompts

Resources

Contextual data attached and managed by the client

Name	Description
No resources

Server Configuration
Instructions
Capabilities
Tools
Prompts
Resources

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/flash-cards/flash'

If you have feedback or need assistance with the MCP directory API, please join our Discord server