---
bezeichner: "io.github.shakaran/symfony-agent-mcp"
art: "mcp_server"
slug: "io-github-shakaran-symfony-agent-mcp"
paketkoordinate: "npm:@shakaran/symfony-agent-mcp"
status: "aktiv"
homepage: "https://github.com/shakaran/symfony-agent-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.shakaran"
registerseite: "https://tracevero.com/mcp/io-github-shakaran-symfony-agent-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: true
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more."
version: "1.0.2"
roh_umgebungsvariablen: "SYMFONY_MCP_DYNAMIC_TOOLS, SYMFONY_MCP_TOKEN_BUDGET, SYMFONY_MCP_ALLOWED_PATHS, SYMFONY_MCP_SESSION_SECRET, SYMFONY_MCP_SESSION_TOKEN, SYMFONY_MCP_AUDIT, SYMFONY_MCP_DLP"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/shakaran/symfony-agent-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: "SYMFONY_MCP_ALLOWED_PATHS"
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-08-23"
roh_aktualisiert_am: "2026-08-23"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "@shakaran/symfony-agent-mcp"
roh_paketversionen: "1.0.2"
roh_laufzeithinweise: ""
roh_umgebungsformate: "boolean, filepath, number, string"
roh_umgebungsbeschreibungen: "SYMFONY_MCP_ALLOWED_PATHS=Colon-separated allowlist of directories the server may read. Any app_path outside them is refused. · SYMFONY_MCP_AUDIT=Encrypted audit log of every tool call. · SYMFONY_MCP_DLP=Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit. · SYMFONY_MCP_DYNAMIC_TOOLS=Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000). · SYMFONY_MCP_SESSION_SECRET=Enables session-token authentication. Unset, authentication is off. · SYMFONY_MCP_SESSION_TOKEN=Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set. · SYMFONY_MCP_TOKEN_BUDGET=Token ceiling for the schemas a session may have active at once."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@shakaran/symfony-agent-mcp\",\"version\":\"1.0.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SYMFONY_MCP_DYNAMIC_TOOLS\",\"description\":\"Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000).\",\"format\":\"boolean\",\"required\":false,\"secret\":false},{\"name\":\"SYMFONY_MCP_TOKEN_BUDGET\",\"description\":\"Token ceiling for the schemas a session may have active at once.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"SYMFONY_MCP_ALLOWED_PATHS\",\"description\":\"Colon-separated allowlist of directories the server may read. Any app_path outside them is refused.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"SYMFONY_MCP_SESSION_SECRET\",\"description\":\"Enables session-token authentication. Unset, authentication is off.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"SYMFONY_MCP_SESSION_TOKEN\",\"description\":\"Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"SYMFONY_MCP_AUDIT\",\"description\":\"Encrypted audit log of every tool call.\",\"format\":\"boolean\",\"required\":false,\"secret\":false},{\"name\":\"SYMFONY_MCP_DLP\",\"description\":\"Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit.\",\"format\":\"boolean\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# Symfony Agent MCP

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-24T01:17:01.536Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-24T01:17:01.536Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | true | MCP-Register | 2026-08-24T01:17:01.536Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: SYMFONY_MCP_ALLOWED_PATHS |
| Repository URL listed | true | MCP-Register | 2026-08-24T01:17:01.536Z | abgeleitet | roh_repository_url: https://github.com/shakaran/symfony-agent-mcp |
| Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more. |
| Description (raw) | Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 1.0.2 | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Environment variables (raw) | SYMFONY_MCP_DYNAMIC_TOOLS, SYMFONY_MCP_TOKEN_BUDGET, SYMFONY_MCP_ALLOWED_PATHS, SYMFONY_MCP_SESSION_SECRET, SYMFONY_MCP_SESSION_TOKEN, SYMFONY_MCP_AUDIT, SYMFONY_MCP_DLP | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Repository (raw) | https://github.com/shakaran/symfony-agent-mcp | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Path environment variables (raw) | SYMFONY_MCP_ALLOWED_PATHS | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-08-23 | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-08-23 | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Package identifiers (raw) | @shakaran/symfony-agent-mcp | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Package versions (raw) | 1.0.2 | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Environment variable formats (raw) | boolean, filepath, number, string | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Environment variable descriptions (raw) | SYMFONY_MCP_ALLOWED_PATHS=Colon-separated allowlist of directories the server may read. Any app_path outside them is refused. · SYMFONY_MCP_AUDIT=Encrypted audit log of every tool call. · SYMFONY_MCP_DLP=Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit. · SYMFONY_MCP_DYNAMIC_TOOLS=Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000). · SYMFONY_MCP_SESSION_SECRET=Enables session-token authentication. Unset, authentication is off. · SYMFONY_MCP_SESSION_TOKEN=Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set. · SYMFONY_MCP_TOKEN_BUDGET=Token ceiling for the schemas a session may have active at once. | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-24T01:17:01.536Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@shakaran/symfony-agent-mcp","version":"1.0.2","transport":"stdio","environment":[{"name":"SYMFONY_MCP_DYNAMIC_TOOLS","description":"Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000).","format":"boolean","required":false,"secret":false},{"name":"SYMFONY_MCP_TOKEN_BUDGET","description":"Token ceiling for the schemas a session may have active at once.","format":"number","required":false,"secret":false},{"name":"SYMFONY_MCP_ALLOWED_PATHS","description":"Colon-separated allowlist of directories the server may read. Any app_path outside them is refused.","format":"filepath","required":false,"secret":false},{"name":"SYMFONY_MCP_SESSION_SECRET","description":"Enables session-token authentication. Unset, authentication is off.","format":"string","required":false,"secret":true},{"name":"SYMFONY_MCP_SESSION_TOKEN","description":"Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set.","format":"string","required":false,"secret":true},{"name":"SYMFONY_MCP_AUDIT","description":"Encrypted audit log of every tool call.","format":"boolean","required":false,"secret":false},{"name":"SYMFONY_MCP_DLP","description":"Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit.","format":"boolean","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-shakaran|io.github.shakaran]]

---

- Registry page: <https://tracevero.com/mcp/io-github-shakaran-symfony-agent-mcp>
- Retrieved on: 2026-10-11
