vault-mcp-bridge
by kizz-tech
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NODE_ENV | No | Environment mode: 'development' or 'production'. | |
| JWT_SCOPE | No | The scope required for MCP requests, e.g., 'vault:read'. | |
| MCP_HOSTS | No | Comma-separated list of allowed MCP hosts. | |
| JWT_ISSUER | No | The issuer for JWT tokens. | |
| JWT_AUDIENCE | No | The audience for JWT tokens. | |
| JWT_JWKS_URL | No | URL for remote JWKS when JWT_ALLOW_REMOTE_JWKS is true. | |
| MCP_VAULT_ID | No | Identifier for the vault. | |
| ALLOWED_HOSTS | No | Comma-separated list of allowed hosts. | |
| JWT_JWKS_FILE | No | Path to a local JWKS file used to verify JWT signatures. | |
| MCP_DEV_TOKEN | No | Development-only token for the MCP server. | |
| MAX_BODY_BYTES | No | Maximum request body size in bytes. | |
| MAX_TEMP_BYTES | No | Maximum temporary storage size in bytes. | |
| MIN_FREE_BYTES | No | Minimum free disk space in bytes. | |
| MAX_INDEX_BYTES | No | Maximum index size in bytes. | |
| MAX_VAULT_BYTES | No | Maximum vault size in bytes. | |
| PUBLISHER_HOSTS | No | Comma-separated list of allowed publisher hosts. | |
| MCP_RESOURCE_URL | No | Resource URL for the MCP endpoint. | |
| JWT_ALLOW_RAW_JWKS | No | Set to 'true' to allow raw JWKS (development exception). | |
| MAX_DATABASE_BYTES | No | Maximum database size in bytes. | |
| MCP_INSTALLATION_ID | No | Identifier for the installation. | |
| PUBLISHER_PUBLIC_URL | No | Public URL of the publisher. | |
| JWT_ALLOW_REMOTE_JWKS | No | Set to 'true' to allow remote JWKS. | |
| MCP_EDGE_NONCE_HEADER | No | HTTP header name for MCP edge nonce. | |
| PUBLISHER_MTLS_REQUIRED | No | Set to 'true' to require mTLS from publisher. | |
| MAX_RETAINED_GENERATIONS | No | Maximum number of retained generations. | |
| MCP_EDGE_TIMESTAMP_HEADER | No | HTTP header name for MCP edge timestamp. | |
| MCP_EDGE_ATTESTATION_HEADER | No | HTTP header name for MCP edge attestation. | |
| PUBLISHER_EDGE_NONCE_HEADER | No | HTTP header name for publisher edge nonce. | |
| PUBLISHER_EDGE_TIMESTAMP_HEADER | No | HTTP header name for publisher edge timestamp. | |
| MAX_MCP_EDGE_ATTESTATION_ENTRIES | No | Maximum number of MCP edge attestation entries. | |
| MCP_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for MCP edge attestation. | |
| PUBLISHER_EDGE_ATTESTATION_HEADER | No | HTTP header name for publisher edge attestation. | |
| PUBLISHER_EDGE_CERT_STATUS_HEADER | No | HTTP header name for publisher edge certificate status. | |
| PUBLISHER_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for publisher edge attestation. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivitySlowing
ResponsivenessUnresponsive