Copilot Workspace MCP
by jogalanza
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OUT_DIR | No | Build-only: write build/package output to a folder other than `release/`. | |
| WORKSPACES | Yes | Registered code workspaces to expose, set in .env (see .env.example). | |
| MCP_API_KEY | Yes | API key required on every request except GET /health (sent as the `api-key` header, `Authorization: Bearer`, or `?api_key=` query string). Generate or rotate it with `npm run new-key`, or the standalone executable's `--new-key` / `--show-key` flags. The server refuses to start when MCP_API_KEY is empty unless MCP_ALLOW_ANONYMOUS=true. | |
| ALLOWED_ROOTS | Yes | Filesystem roots under which workspaces may be registered; add_workspace only accepts folders under these roots. | |
| ENABLE_BROWSER | No | Enable the optional headless browser tools (browser_open, browser_screenshot, browser_text, browser_click, browser_type, browser_logs, browser_eval, browser_close). On by default in the standalone executable (set ENABLE_BROWSER=false to disable); off by default when running from source. | true |
| BINDING_TTL_DAYS | No | Number of days of inactivity after which a chat's workspace binding expires. | 30 |
| DEFAULT_WORKSPACE | No | Default workspace used when a chat has no binding and no workspace tool argument is given. | |
| MCP_ALLOW_ANONYMOUS | No | Set to true to let the server start without MCP_API_KEY (anonymous access). | false |
| RUN_ALLOWED_COMMANDS | No | Comma-separated command allowlist enabling the run_command / process_output / process_stop / list_processes tools. Non-empty enables the command runner. Do not allowlist interpreters such as node or powershell. | |
| BROWSER_ALLOWED_HOSTS | No | Comma-separated hosts the headless browser may load; every sub-request and redirect is checked and `file:` is refused. | localhost |
| TUNNEL_ALLOW_ANONYMOUS | No | Standalone executable: the dev tunnel allows anonymous clients by default because Copilot Studio / M365 Copilot cannot sign in to a dev tunnel (the API key still protects /mcp). Set TUNNEL_ALLOW_ANONYMOUS=false to restrict the tunnel to your own Microsoft account. | true |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues