Skip to content

Environment variable descriptions (raw)

7,577 distinct values, measured against 42,703 published entries.

Value Entries Share
AVANAN_APP_ID=Set the AVANAN_APP_ID credential for the Avanan MCP server. · AVANAN_BASE_URL=Base URL for the Avanan API. Leave the prefilled default unless your account uses a different regional or self-hosted host. · AVANAN_CLIENT_SECRET=Set the AVANAN_CLIENT_SECRET credential for the Avanan MCP server. · AVANAN_TOKEN=Bearer token for the Avanan Smart API. Minted from your Avanan client ID and secret by `auth login`, or pasted here directly. · AVANAN_USER_AGENT=Overrides the User-Agent the CLI sends on Avanan requests. Leave blank to use the CLI's own built-in User-Agent. · PRINTING_PRESS_CLIENT_PROFILE=Binds this MCP server to one tenant-gated client profile, so every call answers for that customer. Leave blank to use the profile configured as default_client_profile. 1 0.0 %
AVANAN_CLIENT_ID=MSP API Client ID issued by Avanan Support (sent as x-av-app-id) · AVANAN_CLIENT_SECRET=MSP API Client Secret used to sign every request (x-av-sig); never sent on the wire · AVANAN_REGION=API region: us (default), eu, ca, ap, euw2 (UK), or aps1 (India). Avanan issues one key per region. · CONDUIT_S2S_SECRET=Conduit gateway S2S subkey; when set, /mcp requires a valid X-Gateway-S2S header (HTTP transport only) · LOG_LEVEL=Log verbosity: debug, info, warn, error · MCP_HTTP_PORT=HTTP transport listen port · MCP_TRANSPORT=Transport mode: 'stdio' for local CLI use, 'http' for gateway hosting 1 0.0 %
AVCS_REPO=absolute path of the AVCS repo to serve; defaults to the client cwd 1 0.0 %
AVEL_BASE_URL=Base URL of the AVEL instance to verify against (default: https://aisrail.fly.dev) · AVEL_PRIVATE_KEY=EVM private key of the agent identity this MCP server represents — signs every verify()/issue_challenge()/verify_challenge()/get_verdict() call. Never exposed as a tool argument. 1 0.0 %
AVENIR_MCP_WRITE=Set to 1 to expose the write tools; read-only otherwise. · YNAB_API_KEY=Your YNAB personal access token (YNAB > Account settings > Developer settings). 1 0.0 %
AVIASALES_API_TOKEN=Travelpayouts API token (https://www.travelpayouts.com/programs/100/tools/api) · AVIASALES_DEFAULT_CURRENCY=Default price currency · AVIASALES_MARKET=2-letter market whose price cache to read; unset falls back to ru · AVIASALES_PARTNER_ID=Travelpayouts partner ID embedded in booking links 1 0.0 %
AVITO_ADS_ACCOUNT_ID=Ad account id (positive integer) every request is scoped to. · AVITO_ADS_API_BASE=API root override, replacing host and environment prefix (e.g. a local mock). · AVITO_ADS_CLIENT_ID=OAuth2 client id of your Avito application (grant_type=client_credentials). · AVITO_ADS_CLIENT_SECRET=OAuth2 client secret of your Avito application. Treat it as a secret. · AVITO_ADS_ENVIRONMENT=Which API to talk to: production or sandbox. · AVITO_ADS_MAX_RETRIES=Retries on 429 (always) and on 5xx / network errors for reads only. · AVITO_ADS_TIMEOUT_MS=Per-request timeout in milliseconds. · AVITO_ADS_TOKEN_LEEWAY_SECONDS=Refresh the OAuth2 token this many seconds before it expires. 1 0.0 %
AVITO_CLIENT_ID=Avito API client_id (avito.ru → Для бизнеса → Интеграции → API). Optional. · AVITO_CLIENT_SECRET=Avito API client_secret paired with the client_id. Optional. · OZON_API_KEY=Ozon Seller API key paired with the Client ID. · OZON_CLIENT_ID=Ozon Seller Client ID (seller.ozon.ru → Settings → API keys). · OZON_PERF_CLIENT_ID=Ozon Performance (ads) API Client ID. Optional. · OZON_PERF_CLIENT_SECRET=Ozon Performance API Client Secret. Optional. · WB_API_TOKEN=Wildberries Seller API token (seller.wildberries.ru → Settings → API access). Leave unset if you do not sell on WB. · YANDEX_MARKET_API_KEY=Yandex Market Partner API key (partner.market.yandex.ru → Settings → API access). Optional. 1 0.0 %
AVITO_CLIENT_ID=client_id из раздела Для бизнеса → Интеграции → API. · AVITO_CLIENT_SECRET=client_secret оттуда же, меняется на токен по OAuth2. 1 0.0 %
AVITO_MCP_PROTOCOL_ERA=Which MCP protocol revisions this process serves: legacy = 2025-11-25 only, dual = 2025-11-25 and 2026-07-28, modern = 2026-07-28 only. · Client_id=Avito OAuth client_id (from https://www.avito.ru/professionals/api). · Client_secret=Avito OAuth client_secret (from https://www.avito.ru/professionals/api). · Profile_id=Avito profile id (numeric account id); auto-injected into {user_id}/{userId} path params. 1 0.0 %
AVMS_API_KEY=AuraVMS API key (starts with avms_). Create one in the AuraVMS app under Settings > API Keys. 1 0.0 %
AWARDOPEDIA_API_KEY=Free API key from awardopedia.com/signup 1 0.0 %
AWA_BASE_URL=Override the default service URL (https://web.cyberwarex.com). · AWA_X_PAYMENT=Optional x402 X-PAYMENT header. If unset, the server surfaces the 402 invoice to the agent so its own x402 client can pay and retry. 1 0.0 %
AWC_BASE_URL=Base URL for the AWC Data API. Useful for testing against a mock or staging instance. · AWC_TIMEOUT_MS=Per-request timeout in milliseconds (1000–60000). · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). · MCP_TRANSPORT_TYPE=Selects the HTTP transport. 1 0.0 %
AWS_ACCESS_KEY_ID=AWS Access Key ID (optional for S3 — falls back to ~/.aws/credentials or IAM role) · AWS_SECRET_ACCESS_KEY=AWS Secret Access Key (optional for S3 — falls back to ~/.aws/credentials or IAM role) · AZURE_STORAGE_CONNECTION_STRING=Azure Blob Storage connection string (required when using the azure provider) · GOOGLE_CLOUD_PROJECT=Google Cloud project ID (optional when using the gcs provider) · REDIS_URL=Redis connection URL (required when --cache-store redis, defaults to redis://localhost:6379) 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID (pair with AWS_SECRET_ACCESS_KEY) · AWS_SECRET_ACCESS_KEY=AWS secret access key · GOOGLE_APPLICATION_CREDENTIALS=Path to GCP service account JSON key file · HF_TOKEN=HuggingFace API token — get at huggingface.co/settings/tokens · LAMBDA_API_KEY=Lambda Labs API key — get at cloud.lambdalabs.com/api-keys · RUNPOD_API_KEY=RunPod API key — get at runpod.io/console/settings/api-keys · TERRADEV_MCP_BEARER_TOKEN=Bearer token for SSE/remote transport mode (stdio mode does not require this) · VAST_API_KEY=Vast.ai API key — get at console.vast.ai/api-keys 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID (use AWS_PROFILE instead if possible) · AWS_DEFAULT_REGION=AWS region to use (defaults to profile/env settings) · AWS_PROFILE=AWS profile name to use for authentication · AWS_SECRET_ACCESS_KEY=AWS secret access key (use AWS_PROFILE instead if possible) 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID (uses AWS credential chain if not set). · AWS_REGION=AWS region for DynamoDB (or use AWS_DEFAULT_REGION). · AWS_SECRET_ACCESS_KEY=AWS secret access key (uses AWS credential chain if not set). · DYNAMODB_ALLOWED_TABLES=Restrict operations to specific tables (comma-separated); all tables accessible if not set. · DYNAMODB_DISABLED_TOOLS=Comma-separated blacklist of specific tools to disable. · DYNAMODB_ENABLED_TOOLS=Comma-separated whitelist of specific tools to enable. · DYNAMODB_ENABLED_TOOL_GROUPS=Comma-separated tool groups to enable (readonly, readwrite, admin). · DYNAMODB_ENDPOINT=Custom endpoint for local DynamoDB or LocalStack. · SKIP_HEALTH_CHECKS=Skip startup health checks. 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID for authentication. · AWS_ENDPOINT_URL=Custom S3 endpoint URL for MinIO or S3-compatible services. · AWS_REGION=AWS region for S3 operations. · AWS_SECRET_ACCESS_KEY=AWS secret access key for authentication. · S3_BUCKET=Constrain all operations to a single bucket. · S3_DISABLED_TOOLS=Blacklist specific tools by name. · S3_ENABLED_TOOLGROUPS=Comma-separated tool groups: readonly or readwrite. · S3_ENABLED_TOOLS=Whitelist specific tools by name. · S3_FORCE_PATH_STYLE=Use path-style addressing instead of virtual-hosted-style. · SKIP_HEALTH_CHECKS=Skip AWS credential validation health checks at startup. 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID · AWS_PROFILE=Named profile from ~/.aws/credentials, as an alternative to explicit keys · AWS_REGION=AWS region -- required, AWS IoT Core is regional · AWS_SECRET_ACCESS_KEY=AWS secret access key · AWS_SESSION_TOKEN=AWS session token, for temporary credentials 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID · AWS_REGION=AWS region (default us-east-1) · AWS_SECRET_ACCESS_KEY=AWS secret access key · S3_ENDPOINT_URL=Custom S3 endpoint, e.g. http://localhost:4566 for LocalStack. Leave unset for real AWS. · S3_FORCE_PATH_STYLE=Set to true for LocalStack/MinIO path-style addressing. 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID · AWS_REGION=AWS region (e.g. us-east-1) · AWS_SECRET_ACCESS_KEY=AWS secret access key · CLOUDFLARE_ACCOUNT_ID=Cloudflare account ID · CLOUDFLARE_API_TOKEN=Cloudflare API token · GOOGLE_APPLICATION_CREDENTIALS=Path to GCP service account JSON file · GOOGLE_CLOUD_PROJECT=GCP project ID · VERCEL_TOKEN=Vercel personal access token 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key ID · AWS_REGION=AWS region · AWS_SECRET_ACCESS_KEY=AWS secret access key · LOCALSTACK_ENDPOINT=LocalStack endpoint URL 1 0.0 %
AWS_ACCESS_KEY_ID=AWS access key for S3 database connections · AWS_DEFAULT_REGION=AWS region for S3 database connections · AWS_ENDPOINT=AWS endpoint for S3 database connections · AWS_SECRET_ACCESS_KEY=AWS secret access key for S3 database connections · AWS_SESSION_TOKEN=AWS session token for temporary credentials · HOME=Used by DuckDB for extensions and config. Override with --home-dir if not set. · MOTHERDUCK_TOKEN=Access token for MotherDuck connections (alternative to --motherduck-token) · motherduck_token=Access token for MotherDuck connections (alternative to --motherduck-token) 1 0.0 %
AWS_ACCESS_KEY_ID=AWS credentials — only needed for effective pricing (RI/Savings Plans). Public pricing works without credentials. · AWS_SECRET_ACCESS_KEY=AWS secret key — paired with AWS_ACCESS_KEY_ID for effective pricing. · OCC_AWS_ENABLE_COST_EXPLORER=Set to true to enable effective/discounted AWS pricing via Cost Explorer ($0.01/call). · OCC_GCP_API_KEY=GCP free API key — required for GCP pricing, no billing account needed. · OCC_GCP_BILLING_ACCOUNT_ID=GCP billing account ID — enables effective/contract pricing via Cloud Billing API. 1 0.0 %
AWS_ACCESS_KEY_ID=Access key ID for an IAM principal with Cost Explorer read access. Resolved by the AWS SDK's default credential chain. · AWS_BILLING_BASE_URL=Base URL for the AWS Billing Intelligence API. Leave the prefilled default unless your account uses a different regional or self-hosted host. · AWS_BILLING_SLACK_CHANNEL=Slack channel or DM ID that `report --slack` posts to by default (the --slack-channel flag overrides it). Leave blank to pass the destination on every run. · AWS_REGION=Region for the EC2, CloudWatch and S3 calls. Cost Explorer is always served from us-east-1 regardless of this value. · AWS_SECRET_ACCESS_KEY=Secret access key paired with AWS_ACCESS_KEY_ID. · AWS_SESSION_TOKEN=Session token, required only when the keys above are temporary STS or SSO credentials. Leave blank for long-lived IAM user keys. 1 0.0 %
AWS_ACCESS_KEY_ID=Static AWS access key. Only needed if not using a profile/SSO/role. · AWS_MCP_ALLOWED_SERVICES=Optional comma-separated allowlist of AWS CLI service names (e.g. "s3,ec2"). Unset allows all. · AWS_MCP_ALLOW_WRITE=Set to "true" to permit mutating AWS CLI commands. Defaults to read-only. · AWS_MCP_CLI_PATH=Optional path to the aws binary. Defaults to "aws" resolved via PATH. · AWS_PROFILE=Named profile from ~/.aws/config to use. Leave unset to use the default profile. · AWS_REGION=Default AWS region if not set elsewhere. · AWS_SECRET_ACCESS_KEY=Static AWS secret key. Only needed if not using a profile/SSO/role. · AWS_SESSION_TOKEN=Temporary session token, if using short-lived credentials. 1 0.0 %
AWS_ENDPOINT_URL_S3=Optional endpoint for an S3-compatible store such as SeaweedFS. · AWS_PROFILE=Optional AWS profile used by the standard AWS credential chain. · AWS_REGION=AWS region for the bucket or S3-compatible endpoint. · SLIVINGDOC_BUCKET=S3-compatible bucket that stores the shared text workspace. Not needed with SLIVINGDOC_TOKEN, which names its own space. · SLIVINGDOC_TOKEN=API token from slivingdoc.dev for hosted storage; use it instead of the bucket and AWS settings, and leave AWS_ENDPOINT_URL_S3 unset. · SLIVINGDOC_WORKSPACE_ROOT=Optional root that contains directories agents may pull and commit. 1 0.0 %
AWS_MCP_LOG_LEVEL=Application log level · AWS_MCP_REQUIRE_CONFIRMATION=Emit warnings for destructive-looking operations · AWS_MCP_WORKING_DIR=Working directory for file operations · AWS_PROFILE=AWS credentials profile · AWS_REGION=Default AWS region 1 0.0 %
AWS_PROFILE=AWS credential profile to use (standard AWS credential chain). · AWS_REGION=AWS region to target. Falls back to the standard AWS config chain if unset. 1 0.0 %
AWS_PROFILE=AWS profile to scan with (read-only access is enough). Defaults to the standard credential chain. 1 0.0 %
AWS_PROFILE=AWS profile to use. Credentials are read locally and never leave the machine. · AWS_REGION=Region your Wraps stack is deployed in. Optional only if your active AWS profile supplies one — SES identities are per-region. · WRAPS_ALLOWED_RECIPIENTS=Comma-separated addresses the agent may send to. Restricts send_email when write mode is on. · WRAPS_ALLOWED_RECIPIENT_DOMAINS=Comma-separated domains the agent may send to. Matching is exact; list subdomains explicitly. · WRAPS_FROM_EMAIL=Default from address for send_email. Must be a domain verified in your SES account. · WRAPS_HISTORY_TABLE_NAME=DynamoDB table holding email history. Defaults to wraps-email-history. · WRAPS_WRITE_ENABLED=Set to true to enable the send_email tool. Read-only by default. 1 0.0 %
AWS_PROFILE=AWS profile used when a tool call omits `profile`. Any profile your aws CLI can use (SSO, credential_process, role chaining, static keys). Unset: AWS_DEFAULT_PROFILE, then `default`. · AWS_REGION=Region used when a tool call omits `region`. Unset: AWS_DEFAULT_REGION, then us-east-1 (a profile's own region setting is not read). 1 0.0 %
AWS_REGION=AWS region for Secrets Manager lookup. · AWS_SECRET_NAME=AWS Secrets Manager secret containing PostgreSQL credentials. · DATABASE_URL=PostgreSQL connection URL, for example postgresql://user:password@host:5432/database. · DB_HOST=PostgreSQL host when DATABASE_URL is not used. · DB_NAME=PostgreSQL database name when DATABASE_URL is not used. · DB_PASSWORD=PostgreSQL password when DATABASE_URL is not used. · DB_PORT=PostgreSQL port when DATABASE_URL is not used. · DB_USER=PostgreSQL user when DATABASE_URL is not used. 1 0.0 %
AWS_REGION=AWS region where your APC resources live (e.g. us-east-1). Live cryptographic tools also need AWS credentials via the standard AWS credential chain; the knowledge-base and HSM-analysis tools need no account. 1 0.0 %
AWX_BASE_URL=The base URL of your AWX/Ansible Tower instance · AWX_PASSWORD=AWX password (alternative to token) · AWX_TOKEN=AWX API token for authentication · AWX_USERNAME=AWX username (alternative to token) · AWX_VERIFY_SSL=Whether to verify SSL certificates (set to false for self-signed) 1 0.0 %
AXCIENT_API_KEY=Set the AXCIENT_API_KEY credential for the Axcient MCP server. · AXCIENT_BASE_URL=Base URL for the Axcient x360Recover API. Leave the prefilled default unless your account uses a different regional or self-hosted host. 1 0.0 %
AXF_EXECUTION_ROOT=Canonical AXF execution root for runtime cwd and caller-facing execution. Defaults to current working directory. · AXF_EXECUTION_WORKSPACE=Legacy alias for AXF_EXECUTION_ROOT. · AXF_PROJECT_ROOT=Canonical AXF project root for manifest and adapter discovery. Defaults to current working directory when no marker is found. · AXF_REGISTRY_WORKSPACE=Legacy alias for AXF_PROJECT_ROOT. · AXF_WORKSPACE=Legacy alias that sets both the AXF project root and execution root. 1 0.0 %
AXIOMATIC_API_KEY=API key from Settings → MCP · AXIOMATIC_BASE_URL=Workspace origin · AXIOMATIC_ENTITY_ID=Entity UUID pinned to the API key 1 0.0 %
AXIOM_SIGNING_KEY=Optional Ed25519 private key (base64 PKCS#8 or raw seed) used by axiom_sign; never stored under a root. 1 0.0 %
AXIS_API_KEY=Board credential from useaxis.dev. Omit to run local-only, with no cross-machine coordination. · AXIS_API_SECRET=Secret paired with AXIS_API_KEY. · AXIS_ORG_ID=Pin the board to one organization, when you belong to several. 1 0.0 %
AXP_DECISION_URL=AXP Decision API base URL. · AXP_REGISTRY_URL=AXP registry base URL. 1 0.0 %
AYA_AGENT_ID=Your agent's id (ag_...), from Agents in the Auth Your Agent app · AYA_KEY_FILE=Path to the agent's private key (PEM), created with: authyouragent keygen · AYA_VAULT_TOKEN_FILE=Path to the vault's token file · AYA_VAULT_URL=Browser vault address 1 0.0 %
AZDO_MODE=Access mode: read-only | read-write | admin. · AZDO_ORG_URL=Azure DevOps organization URL, e.g. https://dev.azure.com/your-org. · AZDO_PAT=Personal Access Token (read-only to start). 1 0.0 %
AZETH_CHAIN=Target chain: base, baseSepolia, ethereum, ethereumSepolia (default: baseSepolia) · AZETH_EMERGENCY_ADDRESS=Emergency withdrawal destination address (defaults to owner EOA if not set) · AZETH_GUARDIAN_AUTO_SIGN=Set to 'true' to enable automatic guardian co-signing (requires AZETH_GUARDIAN_KEY) · AZETH_GUARDIAN_KEY=Guardian co-signing private key for operations exceeding spending limits (optional) · AZETH_PRIVATE_KEY=Owner private key (0x-prefixed, 64 hex chars). Auto-generated and saved to ~/.azeth/key if not set. · AZETH_RPC_URL_BASE_SEPOLIA=Custom RPC for Base Sepolia (optional, defaults to public RPC). Per-chain: AZETH_RPC_URL_BASE, AZETH_RPC_URL_ETH_SEPOLIA, AZETH_RPC_URL_ETHEREUM · AZETH_SERVER_URL=Azeth server URL for off-chain operations like reputation queries (optional) · XMTP_ENCRYPTION_KEY=XMTP database encryption key for persistent messaging (optional, enables agent-to-agent messaging) 1 0.0 %
AZURE_ALLOWED_SUBSCRIPTIONS=Comma-separated list of Azure subscription IDs this server may query · AZURE_DEFAULT_SUBSCRIPTION=Default subscription ID used when none is specified in a query (must be in AZURE_ALLOWED_SUBSCRIPTIONS) · FINOPS_CACHE_TTL_SECONDS=TTL for cost query cache in seconds (default: 900) 1 0.0 %
AZURE_AUTH_MODE=interactive (device-code, default) or clientCredentials (app-only). · AZURE_CLIENT_ID=Application (client) ID of your Entra app registration (multi-tenant public client). · AZURE_CLIENT_SECRET=Client secret — only for clientCredentials mode. · AZURE_TENANT_ID=Tenant GUID. Required for the Flow audience ('common' fails with AADSTS50059). · DEFAULT_ENVIRONMENT=Environment id used when a tool omits 'environment'. · ENABLE_WRITE_OPS=Set to 'true' to enable mutating tools (default read-only). · FLOW_SCOPES=Comma-separated OAuth scopes (e.g. .../Flows.Read.All,.../Flows.Manage.All). 1 0.0 %
AZURE_CLIENT_ID=App registration (service principal) client id. · AZURE_CLIENT_SECRET=Service principal client secret. · AZURE_MODE=Access mode: read-only | read-write | admin. · AZURE_SUBSCRIPTION_ID=Default subscription id. · AZURE_TENANT_ID=Entra ID tenant id. 1 0.0 %
AZURE_CLIENT_ID=Application (client) id. Defaults to the public Microsoft Graph PowerShell client, so it is optional for trying the server out. · AZURE_CLIENT_SECRET=Client secret for app-only authentication. Leave unset to sign in interactively instead. · AZURE_TENANT_ID=Entra tenant id. Only needed for unattended app-only sign-in; omit it to sign in interactively with a device code. · MINERVA_SHAREPOINT_URL=SharePoint root URL, e.g. https://contoso.sharepoint.com. Required only by the SharePoint/PnP tool when PowerShell runs locally. 1 0.0 %
AZURE_CLIENT_ID=Azure Client ID · AZURE_CLIENT_SECRET=Azure Client Secret · AZURE_SUBSCRIPTION_ID=Azure Subscription ID · AZURE_TENANT_ID=Azure Tenant ID 1 0.0 %

This sheet lists 50 of 7,577 values; they cover 50 entries.

Sheet 25 of 152, 7,577 values in total.

Counted from the projection, the same table the list filters on. An entry counts once per value.

tracevero · https://tracevero.com/werkzeuge/merkmal/mcp/roh_umgebungsbeschreibungen?seite=25