Relay
by previdus
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| FGA_URL | No | OpenFGA API URL. | |
| JWT_ISSUER | No | JWT issuer for JWT authentication mode. | |
| DATABASE_URL | No | PostgreSQL connection string. Without it, SQLite is used. | |
| FGA_MODEL_ID | No | OpenFGA immutable model ID. | |
| FGA_STORE_ID | No | OpenFGA store ID. | |
| JWT_AUDIENCE | No | JWT audience for JWT authentication mode. | |
| JWT_JWKS_URL | No | JWKS URL for JWT authentication mode. | |
| FGA_API_TOKEN | No | OpenFGA API token. | |
| FGA_ALLOW_HTTP | No | Set to true to allow HTTP for OpenFGA (trusted local network only). | |
| GATEWAY_ADMIN_KEY | No | Admin key for the gateway. Set a random admin key in .env. | |
| GATEWAY_STATE_KEY | No | Random secret (at least 32 characters) shared across replicas for callbacks and tasks. | |
| JWT_DPOP_REQUIRED | No | Set to true to require OAuth DPoP for JWT tokens. | |
| OTEL_SERVICE_NAME | No | Service name for OpenTelemetry traces. | |
| JWT_ISSUER_PROFILES | No | JSON configuration for 2–16 separately pinned issuers. | |
| OAUTH_DPOP_REQUIRED | No | Set to true to require OAuth DPoP for opaque introspection. | |
| GATEWAY_RESOURCE_URL | No | Gateway resource URL for JWT authentication mode. | |
| GATEWAY_TLS_KEY_FILE | No | TLS key file for mTLS mode. | |
| APPROVAL_BEARER_TOKEN | No | Bearer token for external approval decision service. | |
| APPROVAL_DECISION_URL | No | External approval decision service URL. | |
| GATEWAY_ALLOWED_HOSTS | No | Allowed hostnames for the gateway. | |
| GATEWAY_TLS_CERT_FILE | No | TLS certificate file for mTLS mode. | |
| OTEL_ALLOW_LOCAL_HTTP | No | Set to true to allow a loopback-only collector for local tests. | |
| JWT_REVOCATION_ENABLED | No | Set to true to enable immediate issuer-bound jti revocation. | |
| STDIO_ALLOWED_COMMANDS | No | Semicolon-separated absolute executable allowlist for stdio upstreams. | |
| UPSTREAM_ALLOWED_HOSTS | No | Immutable deployment-level destination allowlist for upstreams. | |
| OTEL_TRACES_SAMPLE_RATIO | No | Root sampling ratio for traces (0–1, default 0.1). | |
| GATEWAY_DPOP_NONCE_SECRET | No | Secret for DPoP nonce challenges. | |
| GATEWAY_DPOP_PUBLIC_ORIGIN | No | Public origin for DPoP proof validation. | |
| GATEWAY_MTLS_CLIENT_CA_FILE | No | Client CA file for mTLS mode. | |
| OTEL_EXPORTER_OTLP_TRACES_ENDPOINT | No | HTTPS OTLP/HTTP endpoint for distributed traces. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues