Spacefast Security (spacefast-sec)
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CVE_NOW_URL | No | SecMon cve.now advisory enrichment (/api/v1/entries/{cveId}), cached per isolate for 6 hours. | https://cve.now |
| CISA_KEV_URL | No | Known Exploited Vulnerabilities catalog, cached per isolate for 6 hours. | cisagov/kev-data mirror + cisa.gov fallback |
| OSV_VULN_URL | No | OSV vulnerability detail endpoint. | https://api.osv.dev/v1/... |
| RATE_LIMITER | No | Cloudflare Workers Rate Limiting binding. | 30 req / 60 s per IP |
| OSV_BATCH_URL | No | OSV batch endpoint. | https://api.osv.dev/v1/... |
| FIRST_EPSS_URL | No | Exploit Prediction Scoring System (EPSS) scores and percentiles. | https://api.first.org/data/v1/epss |
| ALLOWED_ORIGINS | No | Browser origins allowed to call /mcp (CLI/desktop MCP clients send no Origin header). | https://claude.ai,https://chatgpt.com |
| RATE_LIMIT_PER_MINUTE | No | Rate limit per minute for the Node server (in-memory window). | 30 |
| PROBE_ALLOWED_SUFFIXES | No | Host suffixes the live probe may target (prevents misuse as an open scanner). | space.fast,drop.fast |
| PROBE_ALLOW_CUSTOM_DOMAINS | No | When "true", allows custom domains after verifying via DNS-over-HTTPS (DoH) that A/AAAA records do not resolve to private/loopback IPs. | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo recent community issues