vault-mcp-bridge
by kizz-tech
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NODE_ENV | No | Environment mode: 'development' or 'production'. | |
| JWT_SCOPE | No | The scope required for MCP requests, e.g., 'vault:read'. | |
| MCP_HOSTS | No | Comma-separated list of allowed MCP hosts. | |
| JWT_ISSUER | No | The issuer for JWT tokens. | |
| JWT_AUDIENCE | No | The audience for JWT tokens. | |
| JWT_JWKS_URL | No | URL for remote JWKS when JWT_ALLOW_REMOTE_JWKS is true. | |
| MCP_VAULT_ID | No | Identifier for the vault. | |
| ALLOWED_HOSTS | No | Comma-separated list of allowed hosts. | |
| JWT_JWKS_FILE | No | Path to a local JWKS file used to verify JWT signatures. | |
| MCP_DEV_TOKEN | No | Development-only token for the MCP server. | |
| MAX_BODY_BYTES | No | Maximum request body size in bytes. | |
| MAX_TEMP_BYTES | No | Maximum temporary storage size in bytes. | |
| MIN_FREE_BYTES | No | Minimum free disk space in bytes. | |
| MAX_INDEX_BYTES | No | Maximum index size in bytes. | |
| MAX_VAULT_BYTES | No | Maximum vault size in bytes. | |
| PUBLISHER_HOSTS | No | Comma-separated list of allowed publisher hosts. | |
| MCP_RESOURCE_URL | No | Resource URL for the MCP endpoint. | |
| JWT_ALLOW_RAW_JWKS | No | Set to 'true' to allow raw JWKS (development exception). | |
| MAX_DATABASE_BYTES | No | Maximum database size in bytes. | |
| MCP_INSTALLATION_ID | No | Identifier for the installation. | |
| PUBLISHER_PUBLIC_URL | No | Public URL of the publisher. | |
| JWT_ALLOW_REMOTE_JWKS | No | Set to 'true' to allow remote JWKS. | |
| MCP_EDGE_NONCE_HEADER | No | HTTP header name for MCP edge nonce. | |
| PUBLISHER_MTLS_REQUIRED | No | Set to 'true' to require mTLS from publisher. | |
| MAX_RETAINED_GENERATIONS | No | Maximum number of retained generations. | |
| MCP_EDGE_TIMESTAMP_HEADER | No | HTTP header name for MCP edge timestamp. | |
| MCP_EDGE_ATTESTATION_HEADER | No | HTTP header name for MCP edge attestation. | |
| PUBLISHER_EDGE_NONCE_HEADER | No | HTTP header name for publisher edge nonce. | |
| PUBLISHER_EDGE_TIMESTAMP_HEADER | No | HTTP header name for publisher edge timestamp. | |
| MAX_MCP_EDGE_ATTESTATION_ENTRIES | No | Maximum number of MCP edge attestation entries. | |
| MCP_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for MCP edge attestation. | |
| PUBLISHER_EDGE_ATTESTATION_HEADER | No | HTTP header name for publisher edge attestation. | |
| PUBLISHER_EDGE_CERT_STATUS_HEADER | No | HTTP header name for publisher edge certificate status. | |
| PUBLISHER_EDGE_ATTESTATION_SECRET_FILE | No | Path to the secret file for publisher edge attestation. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kizz-tech/vault-mcp-bridge'
If you have feedback or need assistance with the MCP directory API, please join our Discord server