knowledge-base
by riemannulus
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| KB_DSN | No | PostgreSQL DSN override. Overrides the 'dsn' setting in kb.toml. | |
| KB_CONFIG | Yes | Path to the configuration file (kb.toml). If not set, the server looks for 'kb.toml' in the current working directory. | |
| AWS_REGION | No | AWS region for Bedrock (e.g., 'us-east-1'). | |
| GITHUB_TOKEN | No | GitHub personal access token for the github_prs connector. | |
| NOTION_TOKEN | No | Notion integration token for the Notion connector. | |
| KB_AUTH_TOKEN | No | Bearer token for HTTP transport. When set, the server requires 'Authorization: Bearer <token>'. | |
| KB_PUBLIC_URL | No | Public URL of the MCP server (e.g., 'https://kb.example.com'). Required for OAuth. | |
| LINEAR_API_KEY | No | Personal API key for the Linear connector (alternative to OAuth client credentials). | |
| OPENAI_API_KEY | No | API key for the OpenAI-compatible embedding backend (used when [embedding] backend = 'openai'). | |
| KB_OAUTH_SECRET | No | Secret key for signing OAuth state and session cookies. Generate with `openssl rand -hex 32`. Required for OAuth. | |
| OPENAI_BASE_URL | No | Base URL for the OpenAI-compatible API. | |
| LINEAR_CLIENT_ID | No | OAuth client ID for the Linear connector (alternative to LINEAR_API_KEY). | |
| ANTHROPIC_API_KEY | No | API key for the Anthropic LLM backend (distillation, rerank, etc.). | |
| AWS_ACCESS_KEY_ID | No | AWS access key ID for Bedrock embedding/LLM backends. | |
| KB_OAUTH_TOKEN_TTL | No | Access token TTL in seconds (default: 3600). | 3600 |
| KB_GOOGLE_CLIENT_ID | No | Google OAuth client ID. Required to enable OAuth for the MCP server and dashboard. | |
| KB_OAUTH_REFRESH_TTL | No | Refresh token TTL in seconds (default: 2592000 = 30 days). | 2592000 |
| LINEAR_CLIENT_SECRET | No | OAuth client secret for the Linear connector (alternative to LINEAR_API_KEY). | |
| AWS_SECRET_ACCESS_KEY | No | AWS secret access key for Bedrock embedding/LLM backends. | |
| KB_GOOGLE_CLIENT_SECRET | No | Google OAuth client secret. Required to enable OAuth. | |
| KB_OAUTH_ALLOWED_EMAILS | No | Comma-separated list of additional allowed email addresses for OAuth. | |
| AWS_BEARER_TOKEN_BEDROCK | No | Bedrock API key (alternative to AWS credentials) automatically recognized by boto3. | |
| KB_OAUTH_ALLOWED_DOMAINS | No | Comma-separated list of allowed Google Workspace domains for OAuth (e.g., 'example.com'). Required for OAuth. |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/riemannulus/knowledge-base'
If you have feedback or need assistance with the MCP directory API, please join our Discord server