Sora
by ikenokazuki
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | HTTP / MCP server listen port | 8000 |
| API_KEY | No | Fallback authentication key used when WEB_FETCHER_API_KEY is not set. | |
| NODE_ENV | No | Specify 'production' to enable Fail-Closed behavior, rejecting all requests with 401 if auth key is unset at startup (default is Fail-Open). | |
| NO_PROXY | No | List of hosts to bypass proxy (comma-separated, e.g. localhost,127.0.0.1,.local) | |
| no_proxy | No | List of hosts to bypass proxy (comma-separated, e.g. localhost,127.0.0.1,.local) | |
| ALL_PROXY | No | Standard general-purpose proxy URL (SOCKS5 etc.) | |
| all_proxy | No | Standard general-purpose proxy URL (SOCKS5 etc.) | |
| CHROME_BIN | No | Explicitly specify the path to the Chromium executable (if not set, standard paths and PATH are auto-searched) | |
| HTTP_PROXY | No | Standard HTTP proxy URL (automatically applied to Bun fetch and Chromium headless browser) | |
| LOG_FORMAT | No | Set 'json' to output request logs as structured JSON | |
| http_proxy | No | Standard HTTP proxy URL (automatically applied to Bun fetch and Chromium headless browser) | |
| CHROME_PATH | No | Explicitly specify the path to the Chromium executable (if not set, standard paths and PATH are auto-searched) | |
| HTTPS_PROXY | No | Standard HTTPS proxy URL (automatically applied to Chromium and external HTTPS communication) | |
| https_proxy | No | Standard HTTPS proxy URL (automatically applied to Chromium and external HTTPS communication) | |
| SORA_DB_PATH | No | Path to the SQLite database file (stores cache, monitored targets, domain-specific cookies/localStorage. File is automatically restricted to 0600) | ./data/sora.db |
| SORA_PROXY_URL | No | Dedicated proxy URL for Sora (highest priority). Supports http://, https://, socks5:// | |
| ENABLED_MODULES | No | Enabled modules (comma-separated: web,browser,yahoo,life,disaster,watch,music,gov,trade or all) | all |
| SORA_PROXY_LIST | No | Comma-separated list of proxy URLs for static fetch. When set, rotates randomly per request (takes precedence over SORA_PROXY_URL). Cannot be specified from MCP/REST request parameters for SSRF protection. | |
| SORA_DEFER_TOOLS | No | Enable hybrid mode with 11 core tools always exposed and special tools lazily discovered. false loads all 36 tools statically. | true |
| ALLOW_LOCAL_FETCH | No | If true, allows scraping of localhost / private IP addresses (relaxation of SSRF protection, test use only) | false |
| ALLOW_LOCAL_NO_AUTH | No | If true, allows access without API key only for direct local connections without X-Forwarded-For / X-Real-IP headers. Do not enable behind a reverse proxy. | false |
| DAILY_REQUEST_LIMIT | No | Daily maximum number of requests per API key (rate limit control). Unlimited if not set. | |
| WEB_FETCHER_API_KEY | No | Server-side API authentication key (highest priority). When set, authentication with Authorization: Bearer <key> or X-API-Key header is required. | |
| ALLOW_BROWSER_EVALUATE | No | If false, completely blocks evaluate (arbitrary JS execution) in /browser/action | true |
| ADMIN_ALERT_WEBHOOK_URL | No | Admin alert webhook URL to send when external dependency failures are detected via /health?detailed=true | |
| MAX_CONCURRENT_BROWSERS | No | Maximum number of concurrent Chromium browser sessions to start/execute | 5 |
| PUPPETEER_EXECUTABLE_PATH | No | Explicitly specify the path to the Chromium executable (if not set, standard paths and PATH are auto-searched) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues