Spring Toolkit MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SPRING_TOOLKIT_ALLOWED_ROOTS | No | Semicolon-separated list of absolute paths allowed for workspace inspection | |
| SPRING_TOOLKIT_ENABLE_TEST_RUNS | No | Set to 'true' to enable running Maven/Gradle tests via MCP tools | false |
| SPRING_TOOLKIT_ACTUATOR_BASE_URL | No | Base URL for a single Spring Boot Actuator application, e.g., http://localhost:8080/actuator | |
| SPRING_TOOLKIT_ACTUATOR_PASSWORD | No | Optional password for Basic Auth to Actuator endpoints | |
| SPRING_TOOLKIT_ACTUATOR_USERNAME | No | Optional username for Basic Auth to Actuator endpoints | |
| SPRING_TOOLKIT_ACTUATOR_BASE_URLS | No | Semicolon-separated list of named actuator base URLs, e.g., orders=http://localhost:8080/actuator;billing=http://localhost:8081/actuator | |
| SPRING_TOOLKIT_ENABLE_LOGGER_MUTATION | No | Set to 'true' to enable changing logger levels at runtime | false |
| SPRING_TOOLKIT_ENABLE_SESSION_MUTATION | No | Set to 'true' to enable session deletion | false |
| SPRING_TOOLKIT_ENABLE_ACTUATOR_DOWNLOADS | No | Set to 'true' to enable sensitive actuator downloads like logfile and heap dump metadata | false |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| spring_project_summaryB | Analyze a Spring Boot project and return structured project metadata. |
| analyze_project_structureC | Alias for spring_project_summary, optimized for agent planning. |
| list_rest_controllersC | List detected Spring MVC/WebFlux controllers. |
| list_endpointsB | List detected REST endpoints from local source code. |
| inspect_application_propertiesB | Read Spring application properties/YAML with sensitive values redacted. |
| inspect_flyway_migrationsC | Inspect local Flyway migrations and risk warnings. |
| spring_code_reviewC | Generate a pragmatic Spring Boot code review report. |
| spring_flyway_risk_scanC | Scan Flyway SQL migrations for risky operations. |
| spring_generate_mockmvc_testsB | Generate starter MockMvc test skeletons for detected Spring controllers. |
| generate_mockmvc_testC | Alias for spring_generate_mockmvc_tests. |
| read_surefire_reportA | Read Maven Surefire XML test reports from target/surefire-reports. |
| read_jacoco_reportC | Read JaCoCo XML coverage report from target/site/jacoco/jacoco.xml. |
| run_maven_testsC | Run Maven tests when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| run_gradle_testsB | Run Gradle tests when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| run_specific_testB | Run one Maven or Gradle test when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| list_applicationsB | List configured Actuator applications. |
| get_health_statusC | Read /actuator/health for an application. |
| list_actuator_endpointsC | Read the Actuator endpoint index for an application. |
| get_infoC | Read /actuator/info for an application. |
| get_audit_eventsC | Read /actuator/auditevents. |
| get_beansC | Read /actuator/beans. |
| get_conditionsC | Read /actuator/conditions. |
| get_config_propertiesC | Read /actuator/configprops with sensitive values redacted. |
| get_mappingsC | Read /actuator/mappings. |
| get_flyway_statusC | Read /actuator/flyway runtime migration state. |
| get_liquibase_statusB | Read /actuator/liquibase runtime migration state. |
| get_integration_graphC | Read /actuator/integrationgraph. |
| get_metricsC | Read /actuator/metrics or one metric. |
| get_env_propertiesB | Read /actuator/env with sensitive values redacted. |
| get_loggersC | Read /actuator/loggers or one logger. |
| change_logger_levelA | Change an Actuator logger level when explicitly enabled by policy. |
| get_thread_dumpD | Read /actuator/threaddump. |
| get_startupC | Read /actuator/startup. |
| get_heap_infoC | Read JVM memory metrics from Actuator. |
| get_heap_dump_metadataC | Read /actuator/heapdump response headers when actuator downloads are enabled. |
| get_scheduled_tasksC | Read /actuator/scheduledtasks. |
| get_cache_statsC | Read /actuator/caches. |
| get_http_tracesC | Read /actuator/httpexchanges or /actuator/httptrace. |
| get_quartzC | Read /actuator/quartz or a quartz sub-resource. |
| get_sessionsC | Read /actuator/sessions or one session. |
| delete_sessionC | Delete one Actuator session when explicitly enabled by policy. |
| get_sbomC | Read /actuator/sbom or one SBOM by id. |
| get_prometheusC | Read /actuator/prometheus as bounded text. |
| get_log_fileC | Read /actuator/logfile as bounded text when actuator downloads are enabled. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/giaffa86/spring-toolkit-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server