mcp-vulbox-agent
by luo173176
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_VULBOX_MODE | No | 运行模式。只有 live 模式允许出网（NETWORK_MODES = {live}）；默认 offline 下调用出网工具会返回 MODE_NOT_ALLOWED。要调用主动工具需把 MCP_VULBOX_MODE 切到 live。 | |
| MCP_VULBOX_ACTIVE_TOOLS | No | 主动工具白名单（如 http_probe、tech_detect、tls_check）。必须与 config/config.yaml 的 tools.enabled_active 同时列名才会启用；留空 = 全部关闭。 | |
| MCP_VULBOX_PURGE_SECRET | No | 审计日志清理（audit purge）所需的额外密钥。配置了该项时，purge 除显式 --actor + --yes + 交互确认外还需提供 --secret。可选。 | |
| MCP_VULBOX_HIGH_RISK_TOOLS | No | 高风险工具白名单（如 injection_verify、xss_probe、access_control_probe）。必须与 config/config.yaml 的 tools.enabled_high_risk 同时列名才会启用；留空 = 全部关闭。 | |
| MCP_VULBOX_CONFIRMATION_SECRET | Yes | 人工确认令牌的 HMAC 密钥，只从环境变量读取。必须生成并填入 .env（例如 `python -c "import secrets;print(secrets.token_urlsafe(48))"`），否则所有主动工具与高风险工具无法启用（fail-closed，这是设计行为不是 bug）。 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues