PoLR Workout
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ALLOW_CORS | No | Set to '1' to enable CORS headers for the development web host. Dev only; never use in production. | 0 |
| WORKOUTS_TZ | Yes | The IANA timezone identifier (e.g., 'America/New_York') used for calculating local-time week boundaries and displaying localized times. | |
| ALLOWED_HOSTS | Yes | Comma-separated list of allowed public hostnames (e.g., 'workouts.example.com') for DNS-rebinding protection. Must include your server's public hostname. | |
| MCP_SHARED_TOKEN | Yes | A shared secret token used to authenticate requests to the MCP server. Generate a random string and set as MCP_SHARED_TOKEN. The URL is the credential; treat it like a password. | |
| WORKOUTS_USER_ID | No | Default user ID/namespace when the MCP endpoint URL has no name segment. Defaults to 'local'. | local |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pathofleastresistor/polr-mcp-workout'
If you have feedback or need assistance with the MCP directory API, please join our Discord server