Skip to content

Environment variable descriptions (raw)

7,577 distinct values, measured against 42,703 published entries.

Value Entries Share
AUTHZEN_PDP_TIMEOUT=Per-request timeout for PDP calls, as a Go duration. Default 10s. · AUTHZEN_PDP_TOKEN=Authorization header value for the PDP. A value with no scheme is sent as "Bearer <token>". · AUTHZEN_PDP_URL=Default AuthZEN Access Evaluation endpoint, e.g. https://pdp.example.com/access/v1/evaluation. Only evaluate_policy works without it. · MCP_OPA_ALLOW_NETWORK_BUILTINS=Re-enable http.send, net.lookup_ip_addr and opa.runtime inside evaluated policies. Off by default: policy source evaluated here comes from a model and runs inside the server process. · MCP_OPA_EVAL_TIMEOUT=Wall-clock limit on a single Rego evaluation, as a Go duration. Default 5s. 1 0.0 %
AUTH_ADMIN_ROLE=Bypass role name that grants admin access (default: nogoo9-admin) · AUTH_ADMIN_USERS=Comma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims · AUTH_ENABLED=Enforce JWT verification and user tenant isolation (default: false) · AUTH_ISSUER=Expected token issuer authority check value (e.g. Keycloak) · AUTH_SUB_JSONPATH=JSONPath pattern to extract user identity subject from token · BASE_URL=Hosting URL subpath prefix for gateways and reverse proxies · BUILTIN_TEMPLATES=Enable loading of standard pre-configured templates (default: true) · DOCS_DIR=Directory containing static documentation web files to serve · INTROSPECTION_ENDPOINT=RFC 7662 compliant token introspection validation endpoint · JWKS_URI=Discovery URI to fetch keys from OIDC provider dynamically · JWT_AUDIENCE=Target audience check value for incoming OIDC tokens · JWT_PUBLIC_KEY=PEM public key to verify asymmetric OIDC signatures · JWT_SECRET=HMAC-SHA symmetric secret key to sign/verify JWT tokens · JWT_VERIFICATION_REQUIRED=Set to 'false' to skip OIDC cryptographic signature checks · KUBECONFIG=Path to the Kubernetes API credentials configuration file · NODE_TLS_REJECT_UNAUTHORIZED=Set to '0' to allow connection to unverified TLS endpoints · OAUTH_CLIENT_ID=Client identifier for OAuth2 authentication flows · OAUTH_CLIENT_SECRET=Client secret credentials used for token introspection · OAUTH_DISCOVERY_URL=Standard OIDC .well-known configuration discovery endpoint · OAUTH_LOGIN_METHOD=UI SSO flow login method: 'redirect' or silent 'iframe' · PROXY_SESSION_SECRET=Secret key for session cookie signing · PROXY_SESSION_TTL=Active lifetime in seconds for signed proxy session cookies · REGISTRY_URL=Default container registry for workspace image resolution · STATELESS=Disable in-memory session tracking for stateless execution · TEMPLATES_DIR=Local filesystem directory containing custom YAML/JSON templates · THEMES_CONFIGMAP=ConfigMap name storing dynamic CSS theme overrides · THEMES_DIR=Filesystem directory to scan for custom CSS themes · TLS_CA=Local file path containing trusted client Certificate Authority · TLS_CERT=Local file path containing TLS public certificate (HTTPS) · TLS_KEY=Local file path containing TLS private key (HTTPS) · UI_ENABLED=Serve the built-in HTML dashboard (default: true) · UI_SUBTITLE=Custom dashboard subtitle text below the header title · UI_TITLE=Custom dashboard header title for white-label branding 1 0.0 %
AUTH_METHOD=Authentication method, case-insensitive: 'Basic' (default; switches to Digest by itself when the server only offers Digest), 'Digest' (Digest-only servers without ever sending the password) or 'OAuth' for Google · CALDAV_PASSWORD=Password or app-specific password for DAV server authentication · CALDAV_SERVER_URL=Base URL of your CalDAV/CardDAV server (e.g. https://example.com/dav.php/) · CALDAV_USERNAME=Username for DAV server authentication · GOOGLE_CLIENT_ID=OAuth2 client ID; required when AUTH_METHOD=oauth2 · GOOGLE_CLIENT_SECRET=OAuth2 client secret; required when AUTH_METHOD=oauth2 · GOOGLE_REFRESH_TOKEN=OAuth2 refresh token; required when AUTH_METHOD=oauth2 · GOOGLE_SERVER_URL=Google CalDAV endpoint; required when AUTH_METHOD=oauth2 · GOOGLE_TOKEN_URL=OAuth2 token endpoint for AUTH_METHOD=oauth2 (default: https://oauth2.googleapis.com/token) · GOOGLE_USER=Google account email; required when AUTH_METHOD=oauth2 1 0.0 %
AUTH_METHOD=Pin a single auth method with no fallback, instead of the default waterfall (OAuth, then service account, then Application Default Credentials). · CREDENTIALS_CONFIG=Base64-encoded service account JSON key, as an alternative to SERVICE_ACCOUNT_PATH for headless or container deployments. · CREDENTIALS_PATH=Path to an OAuth Client ID JSON file downloaded from GCP Console, used for the oauth auth method. · ENABLED_TOOLS=Comma-separated list of tool function names to register. Default: all tools enabled. · SERVICE_ACCOUNT_PATH=Path to a Google service account JSON key file, used for the service_account auth method. · TOKEN_PATH=Path where the OAuth token is cached after the first interactive authorization. 1 0.0 %
AUTH_MODE=Authentication mode · BASE_URL=Base URL for HTTP transport (used for OAuth/DCR endpoints and file links) · DCR_MODE=Dynamic Client Registration mode · DCR_STORE_URI=DCR client storage URI (for self-hosted DCR mode) · DCR_VERIFY_URL=External verification endpoint URL (required for external DCR mode) · GOOGLE_CLIENT_ID=Google OAuth client ID (required for OAuth authentication modes) · GOOGLE_CLIENT_SECRET=Google OAuth client secret (optional for public clients) · GOOGLE_SERVICE_ACCOUNT_KEY_FILE=Path to service account JSON key file (required for service-account auth mode) · HEADLESS=Disable browser auto-open, return auth URL instead (true/false) · LOG_LEVEL=Logging level · PORT=HTTP server port (overrides --port) · REDIRECT_URI=OAuth redirect URI (optional, default: ephemeral loopback) · RESOURCE_STORE_URI=Resource store URI for CSV export files (file://) 1 0.0 %
AUTH_MODE=Authentication mode · BASE_URL=Base URL for HTTP transport (used for OAuth/DCR endpoints and file links) · DCR_MODE=Dynamic Client Registration mode · DCR_STORE_URI=DCR client storage URI (for self-hosted DCR mode) · DCR_VERIFY_URL=External verification endpoint URL (required for external DCR mode) · HEADLESS=Disable browser auto-open, return auth URL instead (true/false) · LOG_LEVEL=Logging level · MS_CLIENT_ID=Microsoft OAuth client ID (required for OAuth authentication modes) · MS_CLIENT_SECRET=Microsoft OAuth client secret (optional for public clients) · MS_TENANT_ID=Microsoft tenant ID (required for OAuth authentication) · PORT=HTTP server port (overrides --port) · REDIRECT_URI=OAuth redirect URI (optional, default: ephemeral loopback) · RESOURCE_STORE_URI=Resource store URI for CSV export files (file://) 1 0.0 %
AUTH_MODE=Authentication mode: basic | apikey | oauth · CURRENT_USER_ROLE=RBAC role for the session: readonly | technician | supervisor | manager | admin · MAXIMO_API_KEY=Maximo API key (when AUTH_MODE=apikey) · MAXIMO_HOST=Maximo host base URL (e.g. https://maximo.example.com) · MAXIMO_PASSWORD=Maximo password (when AUTH_MODE=basic) · MAXIMO_URL=Maximo OSLC base URL (e.g. https://maximo.example.com/maximo/oslc) · MAXIMO_USERNAME=Maximo username (when AUTH_MODE=basic) 1 0.0 %
AUTH_MODE=Authentication mode: off (default), write (write+pii tools gated), all (every tool gated). · MCP_API_KEY=API key for authenticated tool calls. Issue one on /admin → API Keys. Required when AUTH_MODE=write or AUTH_MODE=all. · MCP_USERS=Extra username/password users: 'alice:secret:read,write'. Comma-separated, colon-delimited. · RATE_LIMIT=Max tool calls per window per caller. Default 60. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads KPN_GREXX_* locally, 'gateway' expects X-KPN-Grexx-Username and X-KPN-Grexx-Password. Base URL and token URL stay env-only. · KPN_BASE_URL=Legacy developer.kpn.com base URL. Env only. Used only when KPN_LEGACY_DEVELOPER_API=1. · KPN_CLIENT_ID=Legacy developer.kpn.com project client ID. Used only when KPN_LEGACY_DEVELOPER_API=1. · KPN_CLIENT_SECRET=Legacy developer.kpn.com project client secret. Used only when KPN_LEGACY_DEVELOPER_API=1, together with KPN_CLIENT_ID. · KPN_GREXX_BASE_URL=Grexx interface root, without /realtime. Env only — never a gateway header. No default; acceptatie and production differ. · KPN_GREXX_PASSWORD=Grexx API password. Passed to the SDK as the OAuth client_secret (scope=all). The SDK sends it with HTTP Basic on the token endpoint. · KPN_GREXX_TOKEN_URL=OAuth token endpoint. Env only — never a gateway header. Production will differ from acceptatie. · KPN_GREXX_USERNAME=Grexx API username. Passed to the SDK as the OAuth client_id (portal: API Gegevens). The SDK sends it with HTTP Basic on the token endpoint. This server does not mint the token. · KPN_LEGACY_DEVELOPER_API=Set to 1 to also register the developer.kpn.com tools (disturbances, availability, SIM swap, MSM). Default is Grexx only. · KPN_MSM_CLIENT_ID=Optional legacy MSM app ID. Used only when KPN_LEGACY_DEVELOPER_API=1. Must be paired with KPN_MSM_CLIENT_SECRET. · KPN_MSM_CLIENT_SECRET=Optional legacy MSM app secret. Used only when KPN_LEGACY_DEVELOPER_API=1, together with KPN_MSM_CLIENT_ID. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · BITDEFENDER_ACCESS_URL=The Control Center Access URL (My Account -> Control Center API), e.g. https://cloud.gravityzone.bitdefender.com. · BITDEFENDER_API_KEY=Bitdefender GravityZone API key, generated in Control Center -> My Account -> API keys, with the Network/Policies/Reports/Incidents APIs selected. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · BLACKPOINT_API_TOKEN=Blackpoint Cyber API token (Bearer credential) · BLACKPOINT_BASE_URL=Blackpoint API base URL (region-specific). Optional — defaults to the production US endpoint. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · BLACKPOINT_API_TOKEN=Blackpoint Cyber API token (Bearer credential) · BLACKPOINT_BASE_URL=Blackpoint API base URL. Optional. Defaults to https://api.blackpointcyber.com/v1. A value with or without /v1, or the legacy api.compassone.blackpointcyber.com host, is normalized to that URL. Other hosts keep their origin and gain a single /v1 suffix. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · CISCOUMBRELLA_API_KEY=Cisco Umbrella API Key, from Admin > API Keys (or Console Settings > API Keys for Multi-org/MSP) in the Umbrella admin console. · CISCOUMBRELLA_API_SECRET=Cisco Umbrella API Secret paired with the API Key. Shown only once at creation and cannot be retrieved later. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · CORK_API_KEY=Cork API key (Bearer token, generated in Cork's Admin UI). It only ever holds a live bearer key. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · CUSTOMERTHERMOMETER_API_KEY=Customer Thermometer API key (Super API key or sub-API key, from account Integration settings) · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · CYBERQP_ACCESS_TOKEN=CyberQP OAuth2 access token (authorization_code flow, offline_access scope). Exchanged and refreshed upstream of this server - it only ever holds a live bearer token. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · DATTO_SAAS_API_KEY=Datto SaaS Protection (Backupify) API key · DATTO_SAAS_REGION=Region: 'us' (default) or 'eu' · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · DATTO_SAAS_PUBLIC_KEY=Datto REST API public key (Partner Portal > Admin > Integrations > API Keys) · DATTO_SAAS_SECRET_KEY=Datto REST API secret key · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · DICKERDATA_ACCESS_TOKEN=Dicker Data long-lived API access token (obtained from Dicker Data integration support) · DICKERDATA_ACCOUNT_CODE=Dicker Data partner account code · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · DNSFILTER_API_KEY=DNSFilter API key, generated in the DNSFilter dashboard under Account Settings -> Security -> API Keys. Sent as the raw Authorization header value. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · DUBBER_AUTH_ID=Dubber Auth ID (Dubber portal → API tab) · DUBBER_AUTH_TOKEN=Dubber Auth Token (Dubber portal → API tab) · DUBBER_BASE_URL=Full API base URL override (env mode only; overrides DUBBER_REGION) · DUBBER_CLIENT_ID=Mashery application key (developer.dubber.net) · DUBBER_CLIENT_SECRET=Mashery application secret · DUBBER_REGION=API region segment, e.g. 'sandbox' for testing. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · ESETPROTECT_CLIENT_ID=Email of the dedicated ESET Connect API user, created in ESET Business Account with the Integrations toggle enabled. · ESETPROTECT_CLIENT_SECRET=Password of the ESET Connect API user paired with ESETPROTECT_CLIENT_ID. · ESETPROTECT_REGION=ESET Connect region: us (default), eu, de, jpn, or ca. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · GORELO_API_KEY=Gorelo Public API key for the tenant, sent as the X-API-Key header. · GORELO_REGION=Gorelo regional API host: us (default) or au. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · ISLAND_API_KEY=Island API key (custom Api-Key header, generated in the Island Management Console). It only ever holds a live API key. · ISLAND_BASE_URL=Optional override of the Island Management API base URL. Defaults to https://management.island.io/api. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · MSP360_PASSWORD=MSP360 Managed Backup Service provider-portal password · MSP360_USERNAME=MSP360 Managed Backup Service provider-portal username 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · PRINTIX_CLIENT_ID=Printix client ID, issued per-tenant through the Printix Administrator dashboard. · PRINTIX_CLIENT_SECRET=Printix client secret paired with the client ID. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · PRTG_API_KEY=PRTG API key (Bearer token, generated in the PRTG web UI under Account Settings -> My Account -> API Keys). · PRTG_BASE_URL=Base URL of the PRTG core server this connector talks to, e.g. https://prtg.example.com. Every PRTG instance is self-hosted; there is no shared hosted endpoint. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · ROBOSHADOW_REFRESH_TOKEN=RoboShadow Refresh Token, generated at the RoboShadow portal under Reports > API Token. Exchanged internally for a short-lived Bearer Token before each call. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · SLIDE_API_TOKEN=Static bearer API token issued per-account in the Slide Console (Settings > API Keys). Sent as Authorization: Bearer <token> to api.slide.tech. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · TELIVY_API_KEY=Telivy API key, from Telivy Portal > Account > Integrations 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · TERAMIND_ACCESS_TOKEN=Teramind Access Token (JWT, generated in the dashboard's Access Tokens menu). See README's Credential scope section before minting one. · TERAMIND_INSTANCE_URL=Per-instance Teramind dashboard base URL, e.g. https://yourcompany.teramind.co. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · UISP_API_KEY=UISP account token, generated in the UISP console under Settings > Users > API tokens. · UISP_BASE_URL=Base URL of the UISP instance this connector talks to, e.g. https://uisp.example.com. UISP has no shared multi-tenant endpoint; every deployment runs at its own instance FQDN. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · YEASTAR_CLIENT_ID=OAuth-style Client ID, generated in the PBX web portal under Integrations -> API. · YEASTAR_CLIENT_SECRET=OAuth-style Client Secret, generated in the PBX web portal under Integrations -> API. · YEASTAR_PBX_DOMAIN=This appliance's own domain/IP and port, e.g. https://pbx.example.com:8088. Each customer's PBX is its own instance - there is no shared hosted endpoint. 1 0.0 %
AUTH_MODE=Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway. · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_TRANSPORT=Transport mode. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting. · PROOFPOINT_ESSENTIALS_PASSWORD=Proofpoint Essentials org-administrator password (used for the X-Password header) · PROOFPOINT_ESSENTIALS_REGION=Region subdomain, e.g. 'us1' or 'eu1'. Defaults to 'us1'. · PROOFPOINT_ESSENTIALS_USERNAME=Proofpoint Essentials org-administrator username (used for the X-User header) 1 0.0 %
AUTH_PASSWORD=Legacy global SearXNG Basic Auth password · AUTH_USERNAME=Legacy global SearXNG Basic Auth username · SEARXNG_URL=URL of your SearXNG instance 1 0.0 %
AUTH_PROVIDER=Inbound auth provider for HTTP transport (e.g. 'oauth'); required to bind a non-loopback host. · MCP_TRANSPORT=Transport mode: 'stdio' (default, for desktop clients) or 'http'. · PINOT_BROKER_URL=HTTP(S) endpoint of the Pinot Broker. · PINOT_CONTROLLER_URL=HTTP(S) endpoint of the Pinot Controller. · PINOT_PASSWORD=Optional Pinot basic-auth password. · PINOT_TOKEN=Optional Pinot bearer token. Overrides username and password when set. · PINOT_USERNAME=Optional Pinot basic-auth username. · PINOT_USE_MSQE=Whether to enable Pinot multi-stage query engine support. 1 0.0 %
AUTH_TYPE=How to authenticate: 'username_password' uses credentials below, 'access_token' uses a token file instead · ICEDQ_BASE_URL=The base URL of your iceDQ instance (e.g., https://app.icedq.net) · ICEDQ_CLIENT_ID=OAuth client ID for API authentication · ICEDQ_CLIENT_SECRET=OAuth client secret. Required when AUTH_TYPE is 'username_password'. · ICEDQ_ORG_ID=Your iceDQ organization ID (e.g., org-icedq or org-iam.icedq) · ICEDQ_PASSWORD=Your iceDQ password. Required when AUTH_TYPE is 'username_password'. · ICEDQ_REALM=The authentication realm name (e.g., icedq or iam.icedq) · ICEDQ_USERNAME=Your iceDQ username. Required when AUTH_TYPE is 'username_password'. · REQUEST_TIMEOUT=Timeout for API requests, in seconds · TOKENS_PATH=Path to JSON file containing access_token and refresh_token. Required when AUTH_TYPE is 'access_token'. · VERIFY_SSL=Enable SSL certificate verification. Set to false only for self-signed certs in testing. 1 0.0 %
AUTOMESSAGE_API_KEY=Your autoMessage API key, from the dashboard at go.automessage.app. Use a read-only key to expose history without send access. · AUTOMESSAGE_API_URL=Override the API base URL. Defaults to the hosted autoMessage API. · AUTOMESSAGE_READ_ONLY=Set to 1 to hide and block the send, cancel and create-contact tools. Pair with a read-only API key for server-side enforcement. 1 0.0 %
AUTOMOX_ACCOUNT_UUID=Account UUID from Automox Settings > Secrets & Keys · AUTOMOX_API_KEY=Your Automox API key · AUTOMOX_ORG_ID=Numeric Automox organization ID. Recommended — required by most tools, optional for tools that don't need org context. 1 0.0 %
AUTONOMAD_AGENT_MODE=Set to 'true' to expose autonomous-agent tools (register_agent, DID-based booking). Default human mode is for Claude/ChatGPT users. · AUTONOMAD_API_URL=Autonomad API base URL. Defaults to production. 1 0.0 %
AUTOPLANS_API_KEY=API key for Autoplans.dev service. Get yours at https://autoplans.dev 1 0.0 %
AUTORIA_API_KEY=AUTO.RIA developer API key · AUTORIA_USER_ID=AUTO.RIA user id (required for paid average-price / VIN tools) 1 0.0 %
AUTOROUTER_CONFIG=Path to autorouter.json. Defaults to the standard lookup chain (./.autorouter.json, ~/.config/autorouter/config.json, …). · AUTOROUTER_IMPORT=Comma-separated harness configs to import: claude, codex, cursor, vscode, plugins. · AUTOROUTER_SELECTOR_MODE=Reranker backend: auto | sampling | cli | api | off. · AUTOROUTER_SELECTOR_MODEL=Model the selector reranks with, e.g. haiku. 1 0.0 %
AUTOTASK_API_INTEGRATION_CODE=Sets AUTOTASK_API_INTEGRATION_CODE for the Autotask PSA MCP server. · AUTOTASK_BASE_URL=Base URL for the Autotask PSA API. Leave the prefilled default unless your account uses a different regional or self-hosted host. · AUTOTASK_PSA_SECRET=Set the AUTOTASK_PSA_SECRET credential for the Autotask MCP server. · AUTOTASK_PSA_USER_NAME=Set the AUTOTASK_PSA_USER_NAME credential for the Autotask MCP server. 1 0.0 %
AUTOWHISPER_API_TOKEN=Your AutoWhisper API token (autowhisper.xyz/skill -> Settings -> Connect your agent). · AUTOWHISPER_BASE_URL=Override the API base URL for self-hosted or staging instances. 1 0.0 %
AUTO_INSTALL_DOCKER=On Windows, install and start Docker Desktop lazily when needed. · AUTO_INSTALL_FLYCTL=Download flyctl into the user profile when it is missing. · BACKEND=Computer provider. Use docker for a local container or fly for a permanent Fly Machine. · COMPUTER_ID=Stable identity of the one persistent computer. · DESKTOP_ENVIRONMENT=Start the real Xfce desktop instead of the virtual desktop. · EXPOSE_LIFECYCLE_TOOLS=Also expose runtime status and network/desktop switching tools to the model. The MCP App can always use them. · FLY_API_TOKEN=Optional Fly API token. A cached flyctl login is also supported. · NETWORK_ACCESS=Allow outbound network access from the computer. 1 0.0 %
AUTO_OPEN_TERMINAL=Set to true or 1 to automatically open the browser terminal when a session is created. · SSH_HOST=Legacy single-target SSH host when not using ssh-session-mcp.config.json device profiles. · SSH_KEY=Optional path to a local SSH private key file for legacy single-target mode. · SSH_MCP_CONFIG=Optional explicit path to ssh-session-mcp.config.json when the config is not in the current working directory. · SSH_MCP_DEBUG=Set to true or 1 to expose browser-side debug controls intended for demos and local troubleshooting. · SSH_MCP_INSTANCE=Optional runtime instance id used to isolate state across multiple MCP clients or agents. · SSH_MCP_LOCAL=Set to true or 1 to run a local shell instead of opening a real SSH connection. Useful for demos and offline testing. · SSH_MCP_MODE=Operation mode. safe blocks risky or unsuitable terminal actions by default, while full allows broader execution. · SSH_PASSWORD=Optional legacy password-based SSH authentication value. · SSH_PORT=Legacy single-target SSH port when not using ssh-session-mcp.config.json device profiles. · SSH_USER=Legacy single-target SSH username when not using ssh-session-mcp.config.json device profiles. · VIEWER_HOST=Optional viewer bind host. Defaults to 127.0.0.1 for local-only browser access. · VIEWER_PORT=Viewer HTTP port. Use auto to allocate a free local port, or 0 to disable the browser viewer. 1 0.0 %
AUTRON_IDENTITY=Path to autron.json identity file (optional) 1 0.0 %
AUVIK_API_KEY=Auvik API key (Basic auth password). Auvik > Admin > Integrations > Auvik API. · AUVIK_BASE_URL=Your Auvik regional API host with no path suffix, e.g. https://auvikapi.us1.my.auvik.com · AUVIK_TENANT=Tenant ID the inventory reads and sync default to (the --tenant flag overrides it). Child tenants are included in the response. Leave blank to use your credential's own tenant. · AUVIK_USERNAME=The Auvik user email whose API key you are using (Basic auth username). · AUVIK_USER_AGENT=Overrides the User-Agent the CLI sends on Auvik requests. Leave blank to use the CLI's own built-in User-Agent. · PRINTING_PRESS_CLIENT_PROFILE=Binds this MCP server to one tenant-gated client profile, so every call answers for that customer. Leave blank to use the profile configured as default_client_profile. 1 0.0 %
AVANAN_APP_ID=Application ID provided by Avanan Support (x-av-app-id) · AVANAN_REGION=API region: us, eu, ca, or ap (defaults to JWT region claim, then us) · AVANAN_SECRET=Shared secret used to compute the x-av-sig HMAC · AVANAN_TOKEN=Token from the Avanan auth handshake (x-av-token) · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_HTTP_PORT=HTTP transport listen port · MCP_TRANSPORT=Transport mode: 'stdio' for local CLI use, 'http' for gateway hosting 1 0.0 %

This sheet lists 50 of 7,577 values; they cover 50 entries.

Sheet 24 of 152, 7,577 values in total.

Counted from the projection, the same table the list filters on. An entry counts once per value.

tracevero · https://tracevero.com/werkzeuge/merkmal/mcp/roh_umgebungsbeschreibungen?seite=24