Test-Governance MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OKTA_SCOPES | No | Comma-separated OAuth2 scopes (e.g., okta.users.read,okta.groups.read) | |
| OKTA_ORG_URL | Yes | Your Okta org URL (e.g., https://your-org.okta.com) | |
| MCP_HTTP_HOST | No | HTTP server bind address | 127.0.0.1 |
| MCP_HTTP_PORT | No | HTTP server port (when transport is http) | 3000 |
| MCP_LOG_LEVEL | No | Log level: debug, info, warn, or error | info |
| MCP_TRANSPORT | No | Transport: stdio or http | stdio |
| OKTA_API_TOKEN | No | Okta API token (SSWS) - use this or OAuth2 client credentials | |
| OKTA_CLIENT_ID | No | OAuth2 client ID for client credentials flow | |
| MCP_CLIENT_SECRET | No | Required for governance-admin and full-admin modes; used to sign confirmation tokens | |
| MCP_STATE_DB_PATH | No | SQLite database path for audit log and token tracking | ./data/state.db |
| MCP_SESSION_SECRET | No | Secret key for signing session cookies (use a random 32+ character string) | |
| MCP_DEPLOYMENT_MODE | No | Deployment mode: read-only, governance-admin, full-admin, or delegated | read-only |
| OKTA_DELEGATED_SCOPES | No | Comma-separated scopes for delegated mode | openid,profile,email,okta.users.read,okta.groups.read,okta.apps.read |
| OKTA_PRIVATE_KEY_PATH | No | Path to RS256 private key PEM file for OAuth2 client credentials | |
| OKTA_DELEGATED_CLIENT_ID | No | Client ID for delegated mode OAuth2 app (Authorization Code + PKCE) | |
| OKTA_DELEGATED_REDIRECT_URI | No | Redirect URI registered in the Okta app for delegated mode |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kaivalyapowale/test-governance-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server