vault-mcp-bridge
by kizz-tech
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NODE_ENV | No | Environment mode: 'development' or 'production'. | |
| JWT_SCOPE | No | The scope required for MCP requests, e.g., 'vault:read'. | |
| MCP_HOSTS | No | Comma-separated list of allowed MCP hosts. | |
| JWT_ISSUER | No | The issuer for JWT tokens. | |
| JWT_AUDIENCE | No | The audience for JWT tokens. | |
| JWT_JWKS_URL | No | URL for remote JWKS when JWT_ALLOW_REMOTE_JWKS is true. | |
| MCP_VAULT_ID | No | Identifier for the vault. | |
| ALLOWED_HOSTS | No | Comma-separated list of allowed hosts. | |
| JWT_JWKS_FILE | No | Path to a local JWKS file used to verify JWT signatures. | |
| MCP_DEV_TOKEN | No | Development-only token for the MCP server. | |
| MAX_BODY_BYTES | No | Maximum request body size in bytes. | |
| MAX_TEMP_BYTES | No | Maximum temporary storage size in bytes. | |
| MIN_FREE_BYTES | No | Minimum free disk space in bytes. | |
| MAX_INDEX_BYTES | No | Maximum index size in bytes. | |
| MAX_VAULT_BYTES | No | Maximum vault size in bytes. | |
| PUBLISHER_HOSTS | No | Comma-separated list of allowed publisher hosts. | |
| MCP_RESOURCE_URL | No | Resource URL for the MCP endpoint. | |
| JWT_ALLOW_RAW_JWKS | No | Set to 'true' to allow raw JWKS (development exception). | |
| MAX_DATABASE_BYTES | No | Maximum database size in bytes. | |
| MCP_INSTALLATION_ID | No | Identifier for the installation. | |
| PUBLISHER_PUBLIC_URL | No | Public URL of the publisher. | |
| JWT_ALLOW_REMOTE_JWKS | No | Set to 'true' to allow remote JWKS. | |
| MCP_EDGE_NONCE_HEADER | No | HTTP header name for MCP edge nonce. | |
| PUBLISHER_MTLS_REQUIRED | No | Set to 'true' to require mTLS from publisher. | |
| MAX_RETAINED_GENERATIONS | No | Maximum number of retained generations. | |
| MCP_EDGE_TIMESTAMP_HEADER | No | HTTP header name for MCP edge timestamp. | |
| MCP_EDGE_ATTESTATION_HEADER | No | HTTP header name for MCP edge attestation. | |
| PUBLISHER_EDGE_NONCE_HEADER | No | HTTP header name for publisher edge nonce. | |
| PUBLISHER_EDGE_TIMESTAMP_HEADER | No | HTTP header name for publisher edge timestamp. | |
| MAX_MCP_EDGE_ATTESTATION_ENTRIES | No | Maximum number of MCP edge attestation entries. | |
| MCP_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for MCP edge attestation. | |
| PUBLISHER_EDGE_ATTESTATION_HEADER | No | HTTP header name for publisher edge attestation. | |
| PUBLISHER_EDGE_CERT_STATUS_HEADER | No | HTTP header name for publisher edge certificate status. | |
| PUBLISHER_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for publisher edge attestation. |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kizz-tech/vault-mcp-bridge'
If you have feedback or need assistance with the MCP directory API, please join our Discord server