io.github.psyb0t/rankrat
by psyb0t
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| RANKRAT_URL | No | Used by the OpenClaw bridge for a shared HTTP server URL. | |
| RANKRAT_IMAGE | No | Host-side environment variable read by rankrat.sh to override the Docker image. | |
| RANKRAT_OAUTH | No | Host-side environment variable read by rankrat.sh to point at a non-default oauth path. | |
| RANKRAT_SECRETS | No | Host-side environment variable read by rankrat.sh to point at a non-default secrets path. | |
| RANKRAT_ENV_FILE | No | Host-side environment variable read by rankrat.sh to point at a non-default .env file. | |
| RANKRAT_HTTP_HOST | No | Bind host for HTTP mode inside the container (used with rankrat.sh http / docker run http). | 127.0.0.1 |
| RANKRAT_HTTP_PORT | No | Host-side environment variable read by rankrat.sh to override HTTP port (default 8080). | 8080 |
| RANKRAT_OAUTH_DIR | No | Used by the OpenClaw bridge to point at the oauth directory. | |
| RANKRAT_READ_ONLY | Yes | Default true (read-only). Set to false to enable write services, REST write routes, and MCP write tools. | true |
| RANKRAT_TRANSPORT | No | Used by the OpenClaw bridge to choose transport (stdio or http). | stdio |
| RANKRAT_UNBOUNDED | No | Set to true to enable unbounded bootstrap mode (bypasses resource allow-lists; requires RANKRAT_READ_ONLY=false). | false |
| RANKRAT_AUTH_TOKEN | No | Used by the OpenClaw bridge as a bearer token when a bearer secret is configured. | |
| RANKRAT_BOUNDARIES | No | Host-side environment variable read by rankrat.sh to point at a non-default config/boundaries path. | |
| RANKRAT_CONFIG_DIR | No | Used by the OpenClaw bridge to point at the config directory. | |
| RANKRAT_SECRETS_DIR | No | Used by the OpenClaw bridge to point at the secrets directory. | |
| RANKRAT_BOUNDARY_FILE | Yes | Path to the boundary file inside the container. | |
| RANKRAT_OAUTH_TOKEN_ROOT | No | Path to the OAuth token root directory inside the container. | |
| RANKRAT_OAUTH_CALLBACK_PORT | No | Host-side environment variable read by rankrat.sh for the OAuth callback port (default 49152). | 49152 |
| RANKRAT_ALLOW_AGENT_ONBOARDING | No | Set to true to allow MCP agents to call site onboard-submit (requires RANKRAT_READ_ONLY=false). | false |
| RANKRAT_HTTP_BEARER_SECRET_FILE | No | Path inside the container to the HTTP bearer secret file. | |
| RANKRAT_RUN_LIVE_INDEXNOW_SUBMISSION | No | Used in verification; set to true for real external IndexNow submission. | false |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/psyb0t/rankrat'
If you have feedback or need assistance with the MCP directory API, please join our Discord server