Spring Toolkit MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SPRING_TOOLKIT_ALLOWED_ROOTS | No | Semicolon-separated list of absolute paths allowed for workspace inspection | |
| SPRING_TOOLKIT_ENABLE_TEST_RUNS | No | Set to 'true' to enable running Maven/Gradle tests via MCP tools | false |
| SPRING_TOOLKIT_ACTUATOR_BASE_URL | No | Base URL for a single Spring Boot Actuator application, e.g., http://localhost:8080/actuator | |
| SPRING_TOOLKIT_ACTUATOR_PASSWORD | No | Optional password for Basic Auth to Actuator endpoints | |
| SPRING_TOOLKIT_ACTUATOR_USERNAME | No | Optional username for Basic Auth to Actuator endpoints | |
| SPRING_TOOLKIT_ACTUATOR_BASE_URLS | No | Semicolon-separated list of named actuator base URLs, e.g., orders=http://localhost:8080/actuator;billing=http://localhost:8081/actuator | |
| SPRING_TOOLKIT_ENABLE_LOGGER_MUTATION | No | Set to 'true' to enable changing logger levels at runtime | false |
| SPRING_TOOLKIT_ENABLE_SESSION_MUTATION | No | Set to 'true' to enable session deletion | false |
| SPRING_TOOLKIT_ENABLE_ACTUATOR_DOWNLOADS | No | Set to 'true' to enable sensitive actuator downloads like logfile and heap dump metadata | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| spring_project_summaryB | Analyze a Spring Boot project and return structured project metadata. |
| analyze_project_structureC | Alias for spring_project_summary, optimized for agent planning. |
| list_rest_controllersC | List detected Spring MVC/WebFlux controllers. |
| list_endpointsB | List detected REST endpoints from local source code. |
| inspect_application_propertiesB | Read Spring application properties/YAML with sensitive values redacted. |
| inspect_flyway_migrationsC | Inspect local Flyway migrations and risk warnings. |
| spring_code_reviewC | Generate a pragmatic Spring Boot code review report. |
| spring_flyway_risk_scanC | Scan Flyway SQL migrations for risky operations. |
| spring_generate_mockmvc_testsB | Generate starter MockMvc test skeletons for detected Spring controllers. |
| generate_mockmvc_testC | Alias for spring_generate_mockmvc_tests. |
| read_surefire_reportA | Read Maven Surefire XML test reports from target/surefire-reports. |
| read_jacoco_reportC | Read JaCoCo XML coverage report from target/site/jacoco/jacoco.xml. |
| run_maven_testsC | Run Maven tests when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| run_gradle_testsB | Run Gradle tests when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| run_specific_testB | Run one Maven or Gradle test when SPRING_TOOLKIT_ENABLE_TEST_RUNS=true. |
| list_applicationsB | List configured Actuator applications. |
| get_health_statusC | Read /actuator/health for an application. |
| list_actuator_endpointsC | Read the Actuator endpoint index for an application. |
| get_infoC | Read /actuator/info for an application. |
| get_audit_eventsC | Read /actuator/auditevents. |
| get_beansC | Read /actuator/beans. |
| get_conditionsC | Read /actuator/conditions. |
| get_config_propertiesC | Read /actuator/configprops with sensitive values redacted. |
| get_mappingsC | Read /actuator/mappings. |
| get_flyway_statusC | Read /actuator/flyway runtime migration state. |
| get_liquibase_statusB | Read /actuator/liquibase runtime migration state. |
| get_integration_graphC | Read /actuator/integrationgraph. |
| get_metricsC | Read /actuator/metrics or one metric. |
| get_env_propertiesB | Read /actuator/env with sensitive values redacted. |
| get_loggersC | Read /actuator/loggers or one logger. |
| change_logger_levelA | Change an Actuator logger level when explicitly enabled by policy. |
| get_thread_dumpD | Read /actuator/threaddump. |
| get_startupC | Read /actuator/startup. |
| get_heap_infoC | Read JVM memory metrics from Actuator. |
| get_heap_dump_metadataC | Read /actuator/heapdump response headers when actuator downloads are enabled. |
| get_scheduled_tasksC | Read /actuator/scheduledtasks. |
| get_cache_statsC | Read /actuator/caches. |
| get_http_tracesC | Read /actuator/httpexchanges or /actuator/httptrace. |
| get_quartzC | Read /actuator/quartz or a quartz sub-resource. |
| get_sessionsC | Read /actuator/sessions or one session. |
| delete_sessionC | Delete one Actuator session when explicitly enabled by policy. |
| get_sbomC | Read /actuator/sbom or one SBOM by id. |
| get_prometheusC | Read /actuator/prometheus as bounded text. |
| get_log_fileC | Read /actuator/logfile as bounded text when actuator downloads are enabled. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/giaffa86/spring-toolkit-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server