Schema | mcp-guard

mcp-guard

Describes the environment variables required to run the server.

Name	Required	Description	Default
`PORT`	No	Port for the HTTP server.	5000
`CORS_ORIGIN`	No	Allowed CORS origin. Defaults to all origins.	*
`MONGODB_URI`	No	MongoDB connection string for the audit log. When unset, an in-memory audit log is used.
`LLM_MAX_CHARS`	No	Maximum number of characters sent to the LLM for detection.	6000
`ANALYSIS_MODEL`	No	Model used by the /analyze endpoint. Defaults to the same as OPENROUTER_MODEL.
`LLM_TIMEOUT_MS`	No	Timeout in milliseconds for OpenRouter LLM calls.	30000
`MCP_SERVER_URL`	No	The URL of the upstream MCP server that MCP-Guard protects. Defaults to the dlptest public server.	dlptest public server
`OPENROUTER_MODEL`	No	The OpenRouter model used for AI detection. Defaults to a free tier model.	openrouter/free
`SOURCE_MAX_CHARS`	No	Maximum number of characters scanned from an HTTP response body.	20000
`SOURCE_MAX_LIMIT`	No	Maximum allowed row or document limit for data source queries.	200
`SOURCE_TIMEOUT_MS`	No	Timeout in milliseconds for data source connector requests.	15000
`OPENROUTER_API_KEY`	No	API key for OpenRouter. When unset, the AI detection pass is skipped and /analyze returns 400.
`ANALYSIS_TIMEOUT_MS`	No	Timeout in milliseconds for /analyze calls.	30000
`SOURCE_DEFAULT_LIMIT`	No	Default row or document limit for data source queries.	20

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Server capabilities have not been inspected yet.

Functions exposed to the LLM to take actions

Name	Description
No tools

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

This server cannot be deployed

ActivityMaintained

ResponsivenessNo issues