Skip to content

MCP server in namespace io.github

io.github.navapbc/rebar · Status: active

The source provides no name of its own for this entry. The identifier therefore appears on this page as a coordinate, not as the heading.

If you find your own account name here: write informally to German.saas@web.de, stating the identifier concerned. No reason has to be given. How to object

Registry name
io.github.navapbc/rebar
Package coordinate
pypi:nava-rebar
Version
0.12.0
Listed in the registry
2026-08-16
Changed in the registry
2026-08-16
First seen by tracevero
2026-08-06
Vendor's website
https://github.com/navapbc/rebar

Event-sourced ticket system with a Jira reconciler, exposed as an MCP server.

Vendor's own description, untranslated and unverified

Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin. What the confidence levels mean

Measured values

Measured values
Credentials requiredno
Raw declaration – Required secret variables (raw): confirmed absent
Raw declaration – Required secret headers (raw): confirmed absent
Source: MCP-Register · collected on 2026-08-06 · derived
Execution locationlocal
Raw declaration – Transports (raw): stdio
Source: MCP-Register · collected on 2026-08-06 · derived
Path argument presentno
Raw declaration – Path arguments (raw): confirmed absent
Raw declaration – Path environment variables (raw): confirmed absent
Source: MCP-Register · collected on 2026-08-06 · derived
Repository URL listedyes
Raw declaration – Repository (raw): https://github.com/navapbc/rebar
Source: MCP-Register · collected on 2026-08-06 · derived
Version0.12.0
Source: MCP-Register · collected on 2026-08-16 · self-declared

Position within the holdings

How many of the 24,507 published entries carry the same measured value. A reference figure, not an assessment.

All 4 values together are carried by 8,546 of 24,507 entries.

This entry appears in these selections

The source's raw values23

Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.

Raw values
Environment variables (raw)REBAR_ROOT, REBAR_MCP_READONLY, REBAR_MCP_ALLOW_LLM, REBAR_MCP_ALLOW_JIRA_SYNC, REBAR_MCP_TRANSPORT, REBAR_MCP_HTTP_HOST, REBAR_MCP_HTTP_PORT, REBAR_MCP_HTTP_PATH, REBAR_MCP_HTTP_ALLOWED_HOSTS, REBAR_MCP_HTTP_ALLOWED_ORIGINS, REBAR_MCP_HTTP_TLS_AT_EDGE, REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP, REBAR_MCP_AUTH_ENABLED, REBAR_MCP_AUTH_STRATEGIES, REBAR_MCP_AUTH_ISSUER_URL, REBAR_MCP_AUTH_RESOURCE_SERVER_URL, REBAR_MCP_AUTH_REQUIRED_SCOPES, REBAR_MCP_AUTH_STATIC_TOKENS_FILE, REBAR_MCP_AUTH_JWT_JWKS_URI, REBAR_MCP_AUTH_JWT_ISSUER, REBAR_MCP_AUTH_JWT_ALGORITHMS, REBAR_MCP_AUTH_JWT_LEEWAY, REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN, REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT, REBAR_MCP_AUTH_JWT_EXPECTED_TYP, REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST, REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT, REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID, REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV, REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST, REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD, REBAR_MCP_AUTH_PROXY_SECRET_ENV, REBAR_MCP_AUTH_PROXY_SECRET_HEADER, REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER, REBAR_MCP_AUTH_PROXY_SCOPES, REBAR_MCP_AUTH_CUSTOM_IMPORT
Source: MCP-Register · collected on 2026-08-06 · self-declared
Required secret variables (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-06 · self-declared
Transports (raw)stdio
Source: MCP-Register · collected on 2026-08-06 · self-declared
Path arguments (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-06 · self-declared
Repository (raw)https://github.com/navapbc/rebar
Source: MCP-Register · collected on 2026-08-06 · self-declared
Package registries (raw)pypi
Source: MCP-Register · collected on 2026-08-06 · self-declared
Required secret headers (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Path environment variables (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote URLs (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote hosts (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Registry status message (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
First listed in the registry (raw)2026-08-16
Source: MCP-Register · collected on 2026-08-16 · self-declared
Last changed in the registry (raw)2026-08-16
Source: MCP-Register · collected on 2026-08-16 · self-declared
Schema version of the raw record (raw)https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json
Source: MCP-Register · collected on 2026-08-16 · self-declared
Delivery form (raw)paket
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository platform (raw)github
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository subfolder (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Package identifiers (raw)nava-rebar
Source: MCP-Register · collected on 2026-08-16 · self-declared
Package versions (raw)0.12.0
Source: MCP-Register · collected on 2026-08-16 · self-declared
Runtime hints (raw)uvx
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable descriptions (raw)REBAR_MCP_ALLOW_JIRA_SYNC=Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only. · REBAR_MCP_ALLOW_LLM=Set to 1 to enable the billable LLM tools (review_code / scan_spec / verify_completion / review_plan); off by default. · REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP=Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off. · REBAR_MCP_AUTH_CUSTOM_IMPORT=The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error). · REBAR_MCP_AUTH_ENABLED=Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default. · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD=Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject). · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST=Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID=The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic). · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV=The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed). · REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT=The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching). · REBAR_MCP_AUTH_ISSUER_URL=OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled. · REBAR_MCP_AUTH_JWT_ALGORITHMS=Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused. · REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST=Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_JWT_EXPECTED_TYP=When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check. · REBAR_MCP_AUTH_JWT_ISSUER=Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset. · REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN=Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30). · REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT=HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10). · REBAR_MCP_AUTH_JWT_JWKS_URI=HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json). · REBAR_MCP_AUTH_JWT_LEEWAY=Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60). · REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER=The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user). · REBAR_MCP_AUTH_PROXY_SCOPES=Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes). · REBAR_MCP_AUTH_PROXY_SECRET_ENV=The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed). · REBAR_MCP_AUTH_PROXY_SECRET_HEADER=The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth). · REBAR_MCP_AUTH_REQUIRED_SCOPES=Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one. · REBAR_MCP_AUTH_RESOURCE_SERVER_URL=The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it. · REBAR_MCP_AUTH_STATIC_TOKENS_FILE=Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens). · REBAR_MCP_AUTH_STRATEGIES=Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom). · REBAR_MCP_HTTP_ALLOWED_HOSTS=Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_ALLOWED_ORIGINS=Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_HOST=Bind host for the Streamable-HTTP transport (default 127.0.0.1). · REBAR_MCP_HTTP_PATH=URL path the Streamable-HTTP transport serves on (default /mcp). · REBAR_MCP_HTTP_PORT=Bind port for the Streamable-HTTP transport (1-65535; default 8000). · REBAR_MCP_HTTP_TLS_AT_EDGE=Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host. · REBAR_MCP_READONLY=Set to 1 to expose only the read tools (no write/mutation tools). · REBAR_MCP_TRANSPORT=Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport). · REBAR_ROOT=Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).
Source: MCP-Register · collected on 2026-08-16 · self-declared
Icon formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared

Changes

Changes
2026-08-16Version: 0.11.0 → 0.12.0
2026-08-16Last changed in the registry (raw): – → 2026-08-16
2026-08-16First listed in the registry (raw): – → 2026-08-16
2026-08-16Registry status message (raw): – → –
2026-08-16Schema version of the raw record (raw): – → https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json
2026-08-16Icon formats (raw): – → –
2026-08-16Environment variable descriptions (raw): – → REBAR_MCP_ALLOW_JIRA_SYNC=Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only. · REBAR_MCP_ALLOW_LLM=Set to 1 to enable the billable LLM tools (review_code / scan_spec / verify_completion / review_plan); off by default. · REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP=Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off. · REBAR_MCP_AUTH_CUSTOM_IMPORT=The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error). · REBAR_MCP_AUTH_ENABLED=Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default. · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD=Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject). · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST=Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID=The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic). · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV=The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed). · REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT=The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching). · REBAR_MCP_AUTH_ISSUER_URL=OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled. · REBAR_MCP_AUTH_JWT_ALGORITHMS=Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused. · REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST=Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_JWT_EXPECTED_TYP=When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check. · REBAR_MCP_AUTH_JWT_ISSUER=Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset. · REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN=Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30). · REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT=HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10). · REBAR_MCP_AUTH_JWT_JWKS_URI=HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json). · REBAR_MCP_AUTH_JWT_LEEWAY=Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60). · REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER=The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user). · REBAR_MCP_AUTH_PROXY_SCOPES=Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes). · REBAR_MCP_AUTH_PROXY_SECRET_ENV=The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed). · REBAR_MCP_AUTH_PROXY_SECRET_HEADER=The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth). · REBAR_MCP_AUTH_REQUIRED_SCOPES=Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one. · REBAR_MCP_AUTH_RESOURCE_SERVER_URL=The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it. · REBAR_MCP_AUTH_STATIC_TOKENS_FILE=Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens). · REBAR_MCP_AUTH_STRATEGIES=Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom). · REBAR_MCP_HTTP_ALLOWED_HOSTS=Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_ALLOWED_ORIGINS=Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_HOST=Bind host for the Streamable-HTTP transport (default 127.0.0.1). · REBAR_MCP_HTTP_PATH=URL path the Streamable-HTTP transport serves on (default /mcp). · REBAR_MCP_HTTP_PORT=Bind port for the Streamable-HTTP transport (1-65535; default 8000). · REBAR_MCP_HTTP_TLS_AT_EDGE=Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host. · REBAR_MCP_READONLY=Set to 1 to expose only the read tools (no write/mutation tools). · REBAR_MCP_TRANSPORT=Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport). · REBAR_ROOT=Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).
2026-08-16Environment variable formats (raw): – → –
2026-08-16Delivery form (raw): – → paket
2026-08-16Remote hosts (raw): – → –

These are the 10 most recent changes to this entry. Full history

tracevero · https://tracevero.com/mcp/io-github-navapbc-rebar