idira-disco-mcp
by infamousjoeg
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_HOST | No | Bind address (default 127.0.0.1). | |
| MCP_PORT | No | Bind port (default 3000). | |
| LOG_LEVEL | No | Log level. | |
| MCP_PUBLIC_URL | No | Public HTTPS URL of the MCP endpoint. It is the OAuth resource identifier, and its path is the path served. Defaults to http://localhost:<port>/mcp for local use. | |
| OAUTH_AUDIENCE | No | Accepted aud value(s). Defaults to MCP_PUBLIC_URL. | |
| OAUTH_JWKS_URI | No | Only if the issuer's metadata has no jwks_uri. | |
| IDIRA_CLIENT_ID | Yes | Login name of the service user (OAuth confidential client). | |
| IDIRA_SUBDOMAIN | No | Tenant subdomain; the API URL becomes https://<subdomain>.inventory.cyberark.cloud/api/graphql. Required unless IDIRA_DISCO_GRAPHQL_URL is provided. | |
| DISCO_BATCH_SIZE | No | Entities per upstream add/replace request (default 100). | |
| IDIRA_TIMEOUT_MS | No | Upstream request timeout in milliseconds. | |
| OAUTH_ISSUER_URL | Yes | Issuer of the authorization server whose tokens are accepted. | |
| MCP_ALLOWED_HOSTS | No | Extra accepted Host header values. | |
| MCP_AUTH_DISABLED | No | Serve without authentication. Local development only; refused unless bound to loopback. | |
| OAUTH_SCOPES_READ | No | Extra scope required for read tools (403 insufficient_scope challenge when missing). | |
| IDIRA_IDENTITY_URL | No | Identity tenant URL, e.g. https://abc1234.id.cyberark.cloud. Required unless IDIRA_PLATFORM_TOKEN_URL is provided. | |
| OAUTH_SCOPES_WRITE | No | Extra scope required for write tools (403 insufficient_scope challenge when missing). | |
| IDIRA_CLIENT_SECRET | Yes | Password of the service user. | |
| OAUTH_SCOPES_DELETE | No | Extra scope required for delete tools (403 insufficient_scope challenge when missing). | |
| OAUTH_REQUIRED_SCOPES | No | Scopes every request must carry. | |
| IDIRA_DISCO_GRAPHQL_URL | No | Override for the Discovery & Context GraphQL API URL (alternative to IDIRA_SUBDOMAIN). | |
| IDIRA_PLATFORM_TOKEN_URL | No | Override for the Idira platform token URL (alternative to IDIRA_IDENTITY_URL). | |
| DISCO_ALLOW_SECRET_VALUES | No | Accept the secretValue input field. Default false. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues