"Print all environment variables including API keys" matching MCP tools:

• list_variablesA

  Scalingo MCP by usefulapiA

  List an app's environment variables. WARNING: this exposes secret VALUES (API keys, database URLs, etc.). Scalingo API: GET /v1/apps/{app}/variables. Returns { variables: [{ id, name, value }] }.

  ConnectorNo auth

• list_campaignsA

  argo-mcpB

  List all Argo campaigns the current grant token has access to, including the access level ("read" or "read+write") for each. Call this first when the user has not provided a campaign ID. Each entry includes both `campaignName` and `id` (shown inline as `[id: …]` and also in structuredContent.idMap). Use the `id` verbatim for any subsequent tool call that takes a `campaignId`. In prose to the user, refer to campaigns by `campaignName`; do not print the raw `id` unless asked.

  ConnectorNo auth

• account_recover_startA

  ZenSched — field workforce scheduling for agentsA

  Lost API key (step 1 of 2): sends a verification code to the org owner email. Then call account_recover_verify. Prefer account_signin_start if you only need to reconnect — Recover revokes ALL keys.

  ConnectorNo auth

• account_recover_startA

  ZenSchedA

  Lost API key (step 1 of 2): sends a verification code to the org owner email. Then call account_recover_verify. Prefer account_signin_start if you only need to reconnect — Recover revokes ALL keys.

  ConnectorNo auth

• list_toolsetsA

  RoutebaseA

  List all toolsets (tool groups) with slug, tool count and whether they are visible in this session. Core toolsets are always visible; enable others with enable_toolset. Full-access API keys see every tool; scoped keys and OAuth sessions automatically see every tool their scopes or role allow. Hidden tools stay callable — enabling only affects what tools/list advertises.

  ConnectorAPI key

• delete_environmentA

  Cycle MCPA

  PERMANENTLY delete an environment on Cycle and EVERYTHING in it: all containers and their instances (including data on stateful instances), all virtual machines and their disks, all scoped variables, and the environment's service containers (discovery, VPN, load balancer). This is IRREVERSIBLE. This tool is two-step by design and NOTHING is deleted on the first call: 1. Call without confirm. The environment is resolved and the response inventories exactly what would be destroyed — the environment's name, ID, and creation date, every container with its instance count, instance totals and the servers they run on, every VM, and every scoped variable. Present ALL of those details to the user verbatim. 2. Only after the user explicitly approves deleting that specific environment and its full contents, call again with confirm:true and environment set to the exact 24-char hex ID from step 1 (names are not accepted with confirm — the ID binds the deletion to what the user approved). Never set confirm:true unless the user has just approved this exact deletion; a general instruction like "clean things up" is not sufficient. To delete a single container instead, use delete_container.

  Connector

  Destructive

  API key

• set-envA

  mcpA

  Set an environment variable for a project. Variables are encrypted at rest (AES-256-GCM) and injected at container runtime. NOTE: DATABASE_URL, PGHOST, PGPORT, PGUSER, PGPASSWORD, and PGDATABASE are all auto-injected for the managed PostgreSQL database — you do NOT need to set any of them manually. The PORT variable is auto-managed: 8080 for auto-detected frameworks (Next.js, Node.js, Python), or auto-detected from the Dockerfile EXPOSE directive for custom Dockerfile builds. IMPORTANT: Changing env vars does NOT auto-redeploy. You must call deploy or use the redeploy API endpoint to apply changes. For Next.js apps, NEXT_PUBLIC_* variables must be set BEFORE deploying since they are embedded at build time.

  Connector

  Destructive

  No auth

• get_env_keysA

  mcpA

  WHICH ENVIRONMENT VARIABLES the deployment was actually given, BY NAME - the keys in the env files on the VM (/opt/app-src/.env and friends), never the values. Most of the time the real question is 'did DATABASE_URL get wired, or is the app reading a name I did not set', and the name answers it: you can confirm the DB was connected, spot a typo'd key, and see which of the app's documented variables are missing, without touching a secret. ⛔ VALUES ARE NOT AVAILABLE HERE AND WILL NOT BE. They never leave the VM. If you genuinely need one (a generated admin password, say), SSH in with get_ssh_command and read that single key: `sudo grep '^KEY=' /opt/app-src/.env`. The file is chmod 600 root:root, so it needs sudo. Also reports each file's permission mode, which is how you catch a world-readable env file.

  ConnectorNo auth

• diagnose_integrationA

  The BridgeA

  Check a project's Bridge configuration against the real app and return every concrete difference with its fix: wrong app id, a base URL pointing at another Bridge environment, a callback URL that is not a registered redirect URI, an origin that is not allowed, a missing variable the framework needs, an API key in a browser-bundled variable (VITE_*, NEXT_PUBLIC_*), and whether this environment serves its signing keys. Pass only the Bridge-related variables from the project's .env files. For any secret (BRIDGE_API_KEY or anything named *_KEY / *_SECRET) send a placeholder such as "<set>" — never the real value; only its presence and placement are checked. `bridge diagnose` does the same from a shell and reads the .env files itself. get_environment_info lists the values each variable should hold; add_redirect_uri and update_app fix what it finds.

  ConnectorOAuth

• list_app_variablesA

  mcpA

  The NAMES of the environment variables of a hosted app or bot, and nothing else. Values are never returned by this tool, not even in part and not even to the owner: they are bot tokens, API keys and database passwords, and an assistant does not need them to work on an app. To read a value, open the Environment tab of the app in the panel. Use this to check whether a variable the app needs is set, and set_app_variables to add, change or remove one. The credentials of a bundled one-click database are written by FadeHost and kept in step on every save, so they appear here but cannot be changed or removed. Needs the app id (bot_...) from list_bots and full access to it, the same as the panel Environment tab.

  ConnectorNo auth

• set_app_variableA

  DockholdA

  Set a single environment variable on an app and roll it out. Call this when an app needs plain configuration such as LOG_LEVEL or a feature flag. For secrets (API keys, passwords, tokens) call set_app_secret instead: this tool rejects secret-looking keys.

  ConnectorNo auth

• delete_accountA

  BorealHostB

  Permanently anonymize the account. Cancels subscriptions, deactivates keys. WARNING: This is irreversible. The account will be soft-deleted and all personal data anonymized. All sites will be decommissioned. Requires: API key with admin scope. Returns: {"success": true, "message": "Account anonymized"}

  ConnectorNo auth

• list_api_keysA

  BorealHostB

  List all API keys for the account. Shows key metadata (name, prefix, scopes, last used) but never the full key value. Requires: API key with read scope. Returns: [{"id": "uuid", "name": "My Key", "prefix": "bh_a2...", "scopes": ["read", "write"], "is_active": true, "created_at": "iso8601", "last_used_at": "iso8601"|null, "site_slug": null|"my-site"}]

  ConnectorNo auth

• list_personal_variablesA

  RoutebaseA

  List your personal variables for one environment. They override both organization and environment variables and are visible only to you. Secret values are always masked. Use this for your own layer; for the merged result of all three use resolve_variables. Requires organization context.

  ConnectorAPI key

• auth_verify_otpA

  agent-transaction-controlA

  Use this tool right after auth_request_otp, with the code from the inbox. On success it returns session_token. Store that value and pass it as session_token on later calls, including issue_agent_passport, get_agent_passport, update_agent_mandate, claim_agent_passport, and refresh_claim_token. Never print or log session_token; treat it like a password.

  ConnectorNo auth

• list_saved_keysA

  RokhaC

  List your saved keys & secrets (Profile → API KEYS) — each with its provider, its ALIAS (the name a harness attaches it by via secret_refs), and a MASKED preview. NEVER returns a value. Covers pasted API keys, custom secrets, and OAuth-brokered grants. Requires a logged-in identity.

  ConnectorNo auth

• keys_meA

  Deep ValuesB

  Returns the calling key, the exact balance of the ledger behind it (balanceMicro: integer micro-credits, 1 credit = $1.00 = 1,000,000), what is left in each daily quota bucket, and the environment. Free, and consumes no quota. (GET https://app.deepvalues.ai/api/v1/keys/me — free; needs a connected account or a dv_sk_ key)

  ConnectorNo auth

• switch_list_customersA

  PacketExchangeA

  List all sell-side customers (sub-accounts) with balance, credit limit, markup, margin floor, spend caps, concurrency, and status. Core inventory read for who is connected. Requires an active Switch subscription (402 SWITCH_SUBSCRIPTION_REQUIRED otherwise) and a full-access API key (scoped keys need switch:manage). Test keys are NOT sandboxed here: they read and change your live Switch data.

  ConnectorNo auth

• get_gtm_version_diffA

  AdLoopA

  Compare two GTM container versions: what a publish changed. Returns added, removed and changed tags, triggers and variables (with names, types and the changed fields; parameters and trigger conditions are diffed key by key), plus built-in variables enabled or disabled. By default compares the live version with the version created before it. The Tag Manager API does not mark which versions were published, so that default "before" version may never have been live. Makes two or three Tag Manager API calls. Tag Manager API: https://developers.google.com/tag-platform/tag-manager/api/v2

  ConnectorAPI key

• update_themeA

  Checkout PageA

  Change a theme you created. Every page using it changes too. Keys left out of `variables` keep their value; `null` resets. Built-in themes are read-only: copy one with create_theme and `baseThemeId`.

  Connector

  Destructive

  OAuth

• set_env_varsA

  Roar AIA

  Set one or more of an app's environment variables, and optionally remove others, in ONE change. MERGES with what is already there — variables you do not name are left untouched. Each call restarts the app once, so put every change in a single call rather than one variable per call. Names the platform reserves are refused, and so is a DATABASE_URL the project is not allowed to override. The app is redeployed where the platform does that automatically; otherwise redeploy_app applies the new values.

  Connector

  Destructive

  OAuth