Skip to content

Environment variable descriptions (raw)

5,626 distinct values, measured against 25,076 published entries.

Value Entries Share
FASTMCP_ENABLE_RICH_LOGGING=Set false for plain or structured JSON log output. · FASTMCP_LOG_LEVEL=Log level for FastMCP internals and app loggers (DEBUG / INFO / WARNING / ERROR / CRITICAL). The -v CLI flag overrides to DEBUG. · MARKDOWN_VAULT_MCP_APP_DOMAIN=MCP Apps iframe domain, used for CSP sandboxing. Overrides the host derived from `base_url`. · MARKDOWN_VAULT_MCP_ATTACHMENT_EXTENSIONS=Comma-separated allowed attachment extensions without the dot (e.g. pdf,png,jpg); use * to allow every non-markdown file. Unset selects the built-in allowlist. · MARKDOWN_VAULT_MCP_AUTH_MODE=Explicit auth-mode override, accepting `remote` or `oidc-proxy` (case- and whitespace-insensitive). When unset the mode is auto-detected from which auth variables are set; the override exists because having all four OIDC variables set is ambiguous between those two modes. Other values are ignored with a warning. · MARKDOWN_VAULT_MCP_BASE_URL=Public base URL of the deployed server, e.g. `https://mcp.example.com`. Required for OIDC. Also the fallback source of the MCP Apps domain when `app_domain` is unset. · MARKDOWN_VAULT_MCP_BEARER_DEFAULT_SUBJECT=Subject assigned to the single-token bearer mode; ignored when `bearer_tokens_file` is set, since mapped mode carries per-token subjects. · MARKDOWN_VAULT_MCP_BEARER_TOKEN=Single shared bearer token; enables bearer auth unless `bearer_tokens_file` is set, which takes precedence. · MARKDOWN_VAULT_MCP_BEARER_TOKENS_FILE=Path to a TOML file mapping bearer tokens to subjects; overrides the single-token `bearer_token` mode. · MARKDOWN_VAULT_MCP_BUILD_TIMEOUT_S=Maximum seconds an index-backed tool or resource waits for the FTS index to become queryable during a cold-start background build before raising IndexUnavailableError(reason="timeout"). Increase for large vaults. · MARKDOWN_VAULT_MCP_CHUNKS_PER_FILE=Maximum chunks returned per document in search results. · MARKDOWN_VAULT_MCP_CHUNK_OVERLAP_WORDS=Words of overlap between adjacent budget-split fragments of the same heading section (0 disables). A reindex applies a new value. · MARKDOWN_VAULT_MCP_CONVENTIONS_FILE=Filename of the per-folder conventions files surfaced to clients at write time (bare .md filename without glob characters). Set to none to disable folder conventions. · MARKDOWN_VAULT_MCP_DISABLE_APPS_UI=Hide the MCP Apps UI tools (browse_vault, show_context) from the tool listing for clients that do not render MCP Apps panels. · MARKDOWN_VAULT_MCP_DRAIN_TIMEOUT_S=Maximum seconds an index-querying read tool waits for the IndexWriter to drain when called with wait_for_pending_writes=true. On timeout the tool answers from the current index and reports index_stale=true in the response _meta. · MARKDOWN_VAULT_MCP_EMBEDDINGS_PATH=Path to the numpy embeddings file; required to enable semantic search. · MARKDOWN_VAULT_MCP_EMBEDDING_BATCH_SIZE=Number of chunks sent per embedding request. Smaller batches shorten each request (useful under a tight timeout on slow models) at the cost of more round-trips. · MARKDOWN_VAULT_MCP_EMBEDDING_PROVIDER=Embedding provider: openai, ollama, or fastembed. Unset auto-detects from the environment. · MARKDOWN_VAULT_MCP_EMBED_CONTEXT=Enrich embedding input with the note title, chunk heading, and (first chunk) searchable-field values. Flipping it re-embeds the whole vault once on next startup. · MARKDOWN_VAULT_MCP_EMBED_TIMEOUT_S=Per-request wall-clock budget in seconds for a single embedding HTTP call (OpenAI/Ollama). The local FastEmbed backend runs in-process with no network call and ignores this. CPU-only or large-model workloads may need 60-120 s; raise this if batches time out. · MARKDOWN_VAULT_MCP_EXCLUDE=Comma-separated glob patterns excluded from scanning, e.g. .obsidian/**,.trash/**. · MARKDOWN_VAULT_MCP_FASTEMBED_CACHE_DIR=FastEmbed model cache directory (in Docker, stored under /data/state/fastembed). · MARKDOWN_VAULT_MCP_FASTEMBED_MODEL=FastEmbed model name. · MARKDOWN_VAULT_MCP_FILE_WATCHER=Watch the vault for external filesystem changes; auto-disabled when git pull or the webhook is active. Requires the file-watcher extra. · MARKDOWN_VAULT_MCP_FILE_WATCHER_DEBOUNCE_S=Seconds of quiet after the last filesystem event before reindexing. · MARKDOWN_VAULT_MCP_FILE_WATCHER_ROOT_FLOOR=Keep the non-recursive watch on the vault root; set false to register zero source-dir-rooted FSEvents streams (avoids repeated macOS access prompts on a home-rooted vault) at the cost of root-level files relying on scans. · MARKDOWN_VAULT_MCP_FOLDER_WEIGHTS=Folder-prefix score multipliers (`prefix:weight` pairs, comma-separated, weights > 0) applied to all search modes; the deepest matching prefix wins (sessions:0.5 demotes sessions/**). · MARKDOWN_VAULT_MCP_FTS_WEIGHTS=Per-column BM25 weights (`column:weight` pairs, comma-separated, weights >= 0) for keyword ranking. Columns: path, title, folder, heading, content, summary. · MARKDOWN_VAULT_MCP_GITHUB_WEBHOOK_SECRET=Shared secret for the GitHub push-event webhook; when set, mounts POST /github-webhook on HTTP/SSE transports to trigger an immediate pull + reindex on push events. · MARKDOWN_VAULT_MCP_GIT_COMMIT_EMAIL=Git committer email for auto-commits. · MARKDOWN_VAULT_MCP_GIT_COMMIT_EMAIL_CLAIM=OIDC claim key used as the commit author email (e.g. email); overrides GIT_COMMIT_EMAIL per request when an OIDC token is present. · MARKDOWN_VAULT_MCP_GIT_COMMIT_NAME=Git committer name for auto-commits; set this in Docker where git config user.name is empty. · MARKDOWN_VAULT_MCP_GIT_COMMIT_NAME_CLAIM=OIDC claim key used as the commit author name (e.g. name); overrides GIT_COMMIT_NAME per request when an OIDC token is present. · MARKDOWN_VAULT_MCP_GIT_LFS=Run git lfs pull on startup to fetch LFS-tracked attachments; set to false for repos without LFS. · MARKDOWN_VAULT_MCP_GIT_PULL_INTERVAL_S=Seconds between git fetch + fast-forward update attempts; 0 disables periodic pull. · MARKDOWN_VAULT_MCP_GIT_PUSH_DELAY_S=Seconds of write-idle time before pushing; 0 pushes only on shutdown. · MARKDOWN_VAULT_MCP_GIT_REPO_URL=HTTPS remote URL for managed git mode: the server clones into an empty SOURCE_DIR on startup (or validates an existing origin) and enables the pull loop, auto-commit, and deferred push. · MARKDOWN_VAULT_MCP_GIT_TOKEN=Token/password for HTTPS git auth; remotes must be HTTPS when set. · MARKDOWN_VAULT_MCP_GIT_USERNAME=Username for HTTPS git auth prompts (x-access-token for GitHub, oauth2 for GitLab, the account name for Bitbucket). · MARKDOWN_VAULT_MCP_HTTP_PATH=Mount path for the MCP endpoint. · MARKDOWN_VAULT_MCP_INDEXED_FIELDS=Comma-separated frontmatter fields promoted to the tag index for structured filtering. Changing it cold-rebuilds the index once on next startup; SEARCHABLE_FIELDS inherits this value when unset. · MARKDOWN_VAULT_MCP_INDEX_PATH=Path to the SQLite FTS5 index file; unset keeps the index in memory. Set it for persistence across restarts. · MARKDOWN_VAULT_MCP_INSTRUCTIONS=Replaces the default MCP instructions text sent to clients. · MARKDOWN_VAULT_MCP_JOBS_MAX_PER_SUBJECT=Maximum live background jobs per calling subject; further promotions are rejected until older records expire. · MARKDOWN_VAULT_MCP_JOBS_RESULT_TTL_S=Seconds a background-job record (working or finished) is retained for polling before it expires from the store. · MARKDOWN_VAULT_MCP_JOBS_SOFT_DEADLINE_S=Seconds a long-running tool call may run in the foreground before it is promoted to a background job and a job handle is returned instead. · MARKDOWN_VAULT_MCP_KV_STORE_URL=Persistent-state backend URL shared by every pvl-core subsystem that needs state. `memory://` is in-process and lost on restart; `file:///path` persists on one server; `redis://`, `dynamodb://` and `mongodb://` each need their matching extra. When unset, defaults to `file:///data/state` (the volume family Docker images mount), or to `memory://` — with a warning — on a host where that directory is not usable. · MARKDOWN_VAULT_MCP_LENGTH_DOWNWEIGHT_ALPHA=Down-weights longer chunks in ranking: score / (1 + alpha * log(chunk_count)). · MARKDOWN_VAULT_MCP_MAX_ATTACHMENT_SIZE_MB=Maximum attachment size in MB returned by read / accepted by write; 0 disables the limit. · MARKDOWN_VAULT_MCP_MAX_CHUNK_CHARS=Character cap enforced alongside MAX_CHUNK_WORDS to bound token-dense chunks. Unset derives min(1500, model context * 2.8). Set a positive value for an exact cap, or -1 to scale with the model's full context (can exhaust memory on long-context models). A reindex applies a new value. · MARKDOWN_VAULT_MCP_MAX_CHUNK_WORDS=Word cap per chunk; the adaptive chunker splits at deeper heading levels, then paragraph/word boundaries, to respect it. Match it to the embedding model's context. A reindex applies a new value. · MARKDOWN_VAULT_MCP_MAX_NOTE_READ_BYTES=Maximum bytes returned by a full-document read of a note; use `read(path, section=…)` for partial reads. 0 disables the limit. · MARKDOWN_VAULT_MCP_OIDC_ADVERTISED_SCOPES=Scopes advertised to MCP clients in protected-resource metadata, space- or comma-separated. Overrides the default `openid offline_access`; `oidc_required_scopes` is always added on top. Set this when the registered client is not permitted `offline_access`, or to have clients request extra claim scopes (e.g. `groups`) without also requiring them in every token. · MARKDOWN_VAULT_MCP_OIDC_AUDIENCE=Expected `aud` claim; tokens issued for another audience are rejected. · MARKDOWN_VAULT_MCP_OIDC_CLIENT_ID=OIDC client identifier registered with the provider. · MARKDOWN_VAULT_MCP_OIDC_CLIENT_SECRET=OIDC client secret registered with the provider. · MARKDOWN_VAULT_MCP_OIDC_CONFIG_URL=OIDC discovery document URL, e.g. `https://auth.example.com/.well-known/openid-configuration`. · MARKDOWN_VAULT_MCP_OIDC_JWT_SIGNING_KEY=Signing key for issued JWTs; used in oidc-proxy mode only. When unset, the key is derived deterministically from `oidc_client_secret`, so tokens survive a restart — but rotating that secret invalidates every issued token. Set this explicitly to decouple token validity from secret rotation. Generate with `openssl rand -hex 32`. · MARKDOWN_VAULT_MCP_OIDC_REQUIRED_SCOPES=Scopes a caller must present, space- or comma-separated. Defaults to `openid` in oidc-proxy mode. · MARKDOWN_VAULT_MCP_OIDC_VERIFY_ACCESS_TOKEN=Validate the access token instead of the id token. · MARKDOWN_VAULT_MCP_OKF_MODE=OKF (Open Knowledge Format) read semantics. With auto (the default), read annotations switch on when the vault declares an OKF version in its root index.md. Use off to disable OKF semantics entirely, or on to force them for an undeclared vault. Annotations are read-only; write behavior is never affected. · MARKDOWN_VAULT_MCP_OKF_VERIFY=How the okf_verify tool attributes a human review. This applies only when OKF_WRITE is on, which gates the tool. With elicit (the default), okf_verify asks the human to confirm the review through an MCP elicitation and records the attestation only on an affirmative reply. It fails closed when the client cannot elicit or the human declines, so a model that holds the human's token cannot self-attest. Use trust-auth to attribute to the authenticated caller with no confirmation (safe only when the sole caller is a human-driven UI), or off to hide the tool so attestation happens through external tooling. A non-default value with OKF_WRITE off is a config error. · MARKDOWN_VAULT_MCP_OKF_WRITE=OKF (Open Knowledge Format) enforced write layer. When true on an OKF-active vault, the server stamps generated provenance on each write and clears any verified attestation when a note's content changes. It also keeps each written folder's log.md and index.md current, and exposes the okf_verify tool. Requires OKF_MODE to be auto or on (a true value with OKF_MODE=off is a config error). Off by default. · MARKDOWN_VAULT_MCP_OLLAMA_CPU_ONLY=Force Ollama to embed on CPU only. · MARKDOWN_VAULT_MCP_OLLAMA_MODEL=Ollama embedding model name. · MARKDOWN_VAULT_MCP_OPENAI_BASE_URL=OpenAI-compatible API base URL for embeddings; the bare OPENAI_BASE_URL is honoured as a fallback. · MARKDOWN_VAULT_MCP_OPENAI_EMBEDDING_MODEL=OpenAI-compatible embedding model name; the bare OPENAI_EMBEDDING_MODEL is honoured as a fallback. · MARKDOWN_VAULT_MCP_PROMPTS_FOLDER=Directory of .md prompt files that extend or override built-in prompts; a relative path is resolved against SOURCE_DIR. · MARKDOWN_VAULT_MCP_READ_ONLY=Set to true to hide the write tools (write, edit, append, delete, rename, move_folder, fetch, git_sync, the okf_* tools, create_upload_link) and serve a search-only vault. git_sync also needs managed git mode; create_upload_link needs an HTTP transport. · MARKDOWN_VAULT_MCP_REQUIRED_FIELDS=Comma-separated frontmatter fields required on every document; documents missing any are excluded from the index. · MARKDOWN_VAULT_MCP_SEARCHABLE_FIELDS=Comma-separated frontmatter fields whose text values become keyword-searchable and enrich first-chunk embeddings. Inherits INDEXED_FIELDS when unset; the sentinel none means filterable but not searchable. Changing it cold-rebuilds the index and re-embeds once on next startup. · MARKDOWN_VAULT_MCP_SERVER_NAME=Rename this server instance; defaults to the project name. · MARKDOWN_VAULT_MCP_SNIPPET_WORDS=Width of the snippet window (words) in search results; 0 returns full chunk content. · MARKDOWN_VAULT_MCP_SOURCE_DIR=Path to the markdown vault directory. Required — the server refuses to start without it. Symbolic links inside the vault are followed on Python 3.13+. · MARKDOWN_VAULT_MCP_STATE_PATH=Path to the change-tracking state file. Defaults to {SOURCE_DIR}/.markdown_vault_mcp/state.json. · MARKDOWN_VAULT_MCP_SUMMARIZE_MAX_INPUT_CHARS=Aggregate cap on note characters sent to the model in one call; excess is truncated with a flag on the result. · MARKDOWN_VAULT_MCP_SUMMARIZE_MAX_NOTES=Cap on the number of notes summarised in one call (subtree expansion truncates to this many). · MARKDOWN_VAULT_MCP_SUMMARIZE_MAX_TOKENS=Upper bound on generated tokens per summarize call; on reasoning models this budget also covers internal reasoning tokens. · MARKDOWN_VAULT_MCP_SUMMARIZE_OPENAI_API_KEY=API key for the OpenAI-compatible summarize endpoint; the bare OPENAI_API_KEY is honoured as a fallback. Unset works for keyless local endpoints (Ollama). · MARKDOWN_VAULT_MCP_SUMMARIZE_OPENAI_BASE_URL=OpenAI-compatible endpoint base URL for the summarize tool; setting it enables the tool even without an API key. The bare OPENAI_BASE_URL routes traffic only when a key already enables the feature. · MARKDOWN_VAULT_MCP_SUMMARIZE_OPENAI_MODEL=Chat model id used for summaries. · MARKDOWN_VAULT_MCP_SUMMARIZE_PROVIDER=Summarization backend (only openai is recognised). Unset auto-detects: the backend activates when credentials or an explicit endpoint are present. · MARKDOWN_VAULT_MCP_SUMMARIZE_TIMEOUT=Per-request wall-clock budget in seconds for a single summarize backend call; keep it below the MCP client's request timeout so the server-side error wins the race. · MARKDOWN_VAULT_MCP_TEMPLATES_FOLDER=Relative folder where note templates live (used by the create_from_template prompt). · MARKDOWN_VAULT_MCP_TITLE_FIELD=Frontmatter field used as the document title (falls back to title, the first H1, then the filename). Changing it cold-rebuilds the index once on next startup. · MARKDOWN_VAULT_MCP_TOOLS_ALLOW=Comma-separated explicit tool names this instance exposes; every other tool is hidden from listings and cannot be invoked. Names matching no registered tool are inert. Mutually exclusive with `tools_deny`. Takes effect through `apply_tool_visibility`. · MARKDOWN_VAULT_MCP_TOOLS_DENY=Comma-separated explicit tool names hidden from this instance (absent from listings, cannot be invoked). Names matching no registered tool are inert. Mutually exclusive with `tools_allow`. Takes effect through `apply_tool_visibility`. · MARKDOWN_VAULT_MCP_TRANSFER_GRACE_TTL_S=Post-success grace window in seconds: a served token's TTL shrinks to this so a stalled transfer can retry within it. · MARKDOWN_VAULT_MCP_TRANSFER_LEASE_S=Crashed-handler reclaim window in seconds for an in-flight reservation. · MARKDOWN_VAULT_MCP_TRANSFER_MAX_UPLOAD_BYTES=Maximum size in bytes of a single upload. · MARKDOWN_VAULT_MCP_TRANSFER_TTL_DEFAULT_S=Link lifetime in seconds when the caller requests no explicit TTL. · MARKDOWN_VAULT_MCP_TRANSFER_TTL_MAX_S=Ceiling in seconds a caller-requested link TTL is clamped to. · OLLAMA_HOST=Ollama server URL for the ollama embedding provider. Bare (not MARKDOWN_VAULT_MCP_-prefixed), matching the Ollama ecosystem convention. · OPENAI_API_KEY=OpenAI API key for the openai embedding provider, and the fallback key for the summarize tool when MARKDOWN_VAULT_MCP_SUMMARIZE_OPENAI_API_KEY is unset. Bare (not MARKDOWN_VAULT_MCP_-prefixed), matching the OpenAI ecosystem convention. · OPENAI_BASE_URL=Bare fallback for MARKDOWN_VAULT_MCP_OPENAI_BASE_URL (embeddings). For the summarize tool it only routes traffic when an API key already enables the feature; it never enables summarize by itself. · OPENAI_EMBEDDING_MODEL=Bare fallback for MARKDOWN_VAULT_MCP_OPENAI_EMBEDDING_MODEL. · PGID=Run the server process as this GID; pair with PUID to match the owner of a mounted volume. · PUID=Run the server process as this UID; the container entrypoint chowns writable paths to match. 1 0.0 %
FASTMCP_ENABLE_RICH_LOGGING=Set false for plain or structured JSON log output. · FASTMCP_LOG_LEVEL=Log level for FastMCP internals and app loggers (DEBUG / INFO / WARNING / ERROR / CRITICAL). The -v CLI flag overrides to DEBUG. · PGID=Run the server process as this GID; pair with PUID to match the owner of a mounted volume. · PUID=Run the server process as this UID; the container entrypoint chowns writable paths to match. · SCHOLAR_GITHUB_TOKEN=GitHub token used to raise rate limits when fetching standards documents from GitHub. Optional; unauthenticated requests work at reduced limits. · SCHOLAR_MCP_APP_DOMAIN=MCP Apps iframe domain, used for CSP sandboxing. Overrides the host derived from `base_url`. · SCHOLAR_MCP_AUTH_MODE=Explicit auth-mode override, accepting `remote` or `oidc-proxy` (case- and whitespace-insensitive). When unset the mode is auto-detected from which auth variables are set; the override exists because having all four OIDC variables set is ambiguous between those two modes. Other values are ignored with a warning. · SCHOLAR_MCP_BASE_URL=Public base URL of the deployed server, e.g. `https://mcp.example.com`. Required for OIDC. Also the fallback source of the MCP Apps domain when `app_domain` is unset. · SCHOLAR_MCP_BEARER_DEFAULT_SUBJECT=Subject assigned to the single-token bearer mode; ignored when `bearer_tokens_file` is set, since mapped mode carries per-token subjects. · SCHOLAR_MCP_BEARER_TOKEN=Single shared bearer token; enables bearer auth unless `bearer_tokens_file` is set, which takes precedence. · SCHOLAR_MCP_BEARER_TOKENS_FILE=Path to a TOML file mapping bearer tokens to subjects; overrides the single-token `bearer_token` mode. · SCHOLAR_MCP_CACHE_DIR=Directory for the SQLite cache database (cache.db) and downloaded PDFs (pdfs/, md/). · SCHOLAR_MCP_CONTACT_EMAIL=Contact email for the OpenAlex polite pool (improves rate limits). Also enables Unpaywall lookups as a PDF fallback source. · SCHOLAR_MCP_DOCLING_URL=Base URL of a running docling-serve instance for PDF conversion (e.g. http://localhost:5001). When unset, PDF conversion tools return an error. · SCHOLAR_MCP_EPO_CONSUMER_KEY=EPO Open Patent Services consumer key. Optional; patent tools are hidden when unset. Register at https://developers.epo.org/user/register. · SCHOLAR_MCP_EPO_CONSUMER_SECRET=EPO Open Patent Services consumer secret. Optional; patent tools are hidden when unset. · SCHOLAR_MCP_GOOGLE_BOOKS_API_KEY=Google Books API key. Optional; book tools work unauthenticated at reduced rate limits. · SCHOLAR_MCP_HTTP_PATH=Mount path for the MCP endpoint. · SCHOLAR_MCP_INSTRUCTIONS=Replaces the default MCP instructions text sent to clients. · SCHOLAR_MCP_KV_STORE_URL=Persistent-state backend URL shared by every pvl-core subsystem that needs state. `memory://` is in-process and lost on restart; `file:///path` persists on one server; `redis://`, `dynamodb://` and `mongodb://` each need their matching extra. When unset, defaults to `file:///data/state` (the volume family Docker images mount), or to `memory://` — with a warning — on a host where that directory is not usable. · SCHOLAR_MCP_OIDC_ADVERTISED_SCOPES=Scopes advertised to MCP clients in protected-resource metadata, space- or comma-separated. Overrides the default `openid offline_access`; `oidc_required_scopes` is always added on top. Set this when the registered client is not permitted `offline_access`, or to have clients request extra claim scopes (e.g. `groups`) without also requiring them in every token. · SCHOLAR_MCP_OIDC_AUDIENCE=Expected `aud` claim; tokens issued for another audience are rejected. · SCHOLAR_MCP_OIDC_CLIENT_ID=OIDC client identifier registered with the provider. · SCHOLAR_MCP_OIDC_CLIENT_SECRET=OIDC client secret registered with the provider. · SCHOLAR_MCP_OIDC_CONFIG_URL=OIDC discovery document URL, e.g. `https://auth.example.com/.well-known/openid-configuration`. · SCHOLAR_MCP_OIDC_JWT_SIGNING_KEY=Signing key for issued JWTs; used in oidc-proxy mode only. When unset, the key is derived deterministically from `oidc_client_secret`, so tokens survive a restart — but rotating that secret invalidates every issued token. Set this explicitly to decouple token validity from secret rotation. Generate with `openssl rand -hex 32`. · SCHOLAR_MCP_OIDC_REQUIRED_SCOPES=Scopes a caller must present, space- or comma-separated. Defaults to `openid` in oidc-proxy mode. · SCHOLAR_MCP_OIDC_VERIFY_ACCESS_TOKEN=Validate the access token instead of the id token. · SCHOLAR_MCP_READ_ONLY=When true, write-tagged tools (PDF download and conversion cache writes) are hidden. Set false to enable them. · SCHOLAR_MCP_S2_API_KEY=Semantic Scholar API key. Optional but strongly recommended: unauthenticated requests are limited to ~1 req/s. Request one at https://www.semanticscholar.org/product/api#api-key-form. · SCHOLAR_MCP_SERVER_NAME=Rename this server instance; defaults to the project name. · SCHOLAR_MCP_TOOLS_ALLOW=Comma-separated explicit tool names this instance exposes; every other tool is hidden from listings and cannot be invoked. Names matching no registered tool are inert. Mutually exclusive with `tools_deny`. Takes effect through `apply_tool_visibility`. · SCHOLAR_MCP_TOOLS_DENY=Comma-separated explicit tool names hidden from this instance (absent from listings, cannot be invoked). Names matching no registered tool are inert. Mutually exclusive with `tools_allow`. Takes effect through `apply_tool_visibility`. · SCHOLAR_MCP_VLM_API_KEY=API key for the VLM endpoint. · SCHOLAR_MCP_VLM_API_URL=OpenAI-compatible VLM endpoint for formula and figure enrichment during PDF conversion. · SCHOLAR_MCP_VLM_MODEL=Model name to use with the VLM endpoint. 1 0.0 %
FASTMCP_LOG_LEVEL=Log level (DEBUG, INFO, WARNING, ERROR) · LOGODEV_MCP_AUTH_MODE=OIDC auth mode: 'remote' (JWKS validation) or 'oidc-proxy' (OAuth proxy). Auto-detected if not set. · LOGODEV_MCP_BASE_URL=Public base URL of this server (required for OIDC) · LOGODEV_MCP_BEARER_TOKEN=Bearer token for authentication · LOGODEV_MCP_KV_STORE_URL=Persistent-state backend URL for pvl-core subsystems. Schemes: file:///path (survives restarts), memory:// (dev/ephemeral). · LOGODEV_MCP_OIDC_AUDIENCE=Expected OIDC token audience · LOGODEV_MCP_OIDC_CLIENT_ID=OIDC client ID · LOGODEV_MCP_OIDC_CLIENT_SECRET=OIDC client secret · LOGODEV_MCP_OIDC_CONFIG_URL=OIDC discovery endpoint URL · LOGODEV_MCP_OIDC_JWT_SIGNING_KEY=Signing key for OIDC session JWTs (critical on Linux/Docker) · LOGODEV_MCP_OIDC_REQUIRED_SCOPES=Space-separated required OIDC scopes · LOGODEV_MCP_SERVER_NAME=MCP server name shown to clients · PGID=Run as this GID (Docker entrypoint) · PUID=Run as this UID (Docker entrypoint) 1 0.0 %
FASTSOCIAL_API_KEY=Your FastSocial API key (get one at fastsocial.ai under Settings → API Keys) 1 0.0 %
FASTTRANSFER_LOG_DIR=Directory for execution logs (default: ./logs) · FASTTRANSFER_PATH=Path to the FastTransfer binary (optional — server runs in preview-only mode without it) · FASTTRANSFER_TIMEOUT=Execution timeout in seconds (default: 1800) · LOG_LEVEL=Logging level: DEBUG, INFO, WARNING, ERROR (default: INFO) 1 0.0 %
FATHOM_API_KEY=Fathom API key (from fathom.video settings) · MCP_HOST_BRIDGE_STATE=Optional path to a host bridge state file used for credential management · MINDSTONE_REBEL_BRIDGE_STATE=Backwards-compatible alias for MCP_HOST_BRIDGE_STATE 1 0.0 %
FATSECRET_CLIENT_ID=FatSecret API Client ID · FATSECRET_CLIENT_SECRET=FatSecret API Client Secret (OAuth 2.0) · FATSECRET_CONSUMER_SECRET=FatSecret API Consumer Secret (OAuth 1.0) 1 0.0 %
FATTURA_XSD_PATH=Path to a local copy of the FatturaPA XSD schema file (optional — built-in schema is used if unset) 1 0.0 %
FAXSEAL_API_KEY=Your FaxSeal API key (fsx_...). Generate one at https://faxseal.com/dashboard/api-tokens 1 0.0 %
FBI_API_KEY=api.data.gov API key for the FBI Crime Data Explorer. Free at https://api.data.gov/signup/. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). 1 0.0 %
FB_PAGE_ACCESS_TOKEN=Long-lived Facebook Page Access Token · FB_PAGE_ID=Default Facebook Page ID (numeric) 1 0.0 %
FCA_API_EMAIL=FCA API email address for authentication. · FCA_API_KEY=FCA API key for authentication. 1 0.0 %
FCC_BDC_HASH_VALUE=API token hash from broadbandmap.fcc.gov Manage API Access page. · FCC_BDC_USERNAME=FCC account email for BDC API. Required for fcc_list_downloads and BDC filing periods. · FCC_MIRROR_ENABLED=Serve Form 477 queries from a local SQLite mirror when its coverage allows (bootstrap with `bun run mirror:init`). Default: false. · FCC_MIRROR_PATH=Directory holding the Form 477 mirror SQLite files. · FCC_OPENDATA_APP_TOKEN=Socrata app token for FCC Open Data. Increases rate limits; not required. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). 1 0.0 %
FCOP_PROJECT_DIR=Absolute path to your project root (optional, auto-detected if omitted). 1 0.0 %
FCP_MCP_OUTPUT_DIR=Directory for modified FCPXML outputs (default: alongside input with _modified suffix) 1 0.0 %
FCP_PROJECTS_DIR=Directory containing your FCPXML project files for auto-discovery 1 0.0 %
FC_API_KEY=football-charts.com API key (free: POST https://footballcharts-backend.onrender.com/api/v1/keys/register/ with {"email": ...}, or use the form at https://www.football-charts.com/developers) 1 0.0 %
FD_API_KEY=Your ForceDream billing key (fd_live_...). Required only to invoke agents, which spends your balance. Omit to use search_agents and verify_proof only, which need no key. 1 0.0 %
FEATURE_LLM=Set to 'true' together with MODEL_* variables to enable background distillation of conversational events; everything else works without it · MODEL_API_KEY=OpenAI-compatible API key for background distillation (DeepSeek, OpenAI, Ollama, ...); not required for core memory, audit, and recall · MODEL_BASE_URL=OpenAI-compatible base URL for the distillation model (e.g. https://api.deepseek.com/v1) · MODEL_NAME=Model used for background distillation (e.g. deepseek-chat) · STATECORE_SCOPE=Override the memory scope name (defaults to the git repository root, else the working directory) 1 0.0 %
FEC_API_KEY=OpenFEC API key — optional (DEMO_KEY: 30 req/hr). Own key: 1000 req/hr. Free at api.data.gov. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). 1 0.0 %
FEDRAMP_DOCS_AUTO_UPDATE=Automatically check for and fetch repository updates (default: true) · FEDRAMP_DOCS_PATH=Path to an existing FedRAMP/docs checkout (default: ~/.cache/fedramp-docs) · FEDRAMP_DOCS_UPDATE_CHECK_HOURS=Hours between automatic update checks (default: 24) 1 0.0 %
FEEDBACK_MAGIC_TOKEN=An fm_sk_… API token, created in the Feedback Magic dashboard under Settings → API & MCP. Scoped to one workspace; provisioning and metadata by default, with read access to feedback as an explicit opt-in per token. 1 0.0 %
FEEDHOOK_API_KEY=Feedhook account API key (create one free via the create_account tool or POST https://feedhook.walls.sh/accounts) 1 0.0 %
FEEDTHROUGH_ALLOWED_HOST_SUFFIXES=Comma-separated non-loopback host suffixes allowed to connect (defaults to .test). Setting it replaces the default, so include .test to keep it. · FEEDTHROUGH_PORT=Port the bridge WebSocket server listens on (defaults to 8765). 1 0.0 %
FEMA_ENABLE_CANVAS_DROP=Enable the destructive fema_dataframe_drop tool for removing staged canvas data. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). 1 0.0 %
FESTO_MCP_ALLOW_OUTSIDE_WORKSPACE=Optional. Set to 1 to allow file-writing tools to write outside the workspace directory. · FESTO_MCP_CODESYS_PATH=Optional. Absolute path to CODESYS.exe — enables the 12 ide_* tools that drive a live CODESYS V3.5 instance (Windows only). · FESTO_MCP_CODESYS_PROFILE=Required when using the ide_* tools. CODESYS profile name exactly as shown in the CODESYS version selector. · FESTO_MCP_ENABLE_HARDWARE=Optional. Set to 1 to enable the cpx_*/edcon_* hardware commissioning tools (bench use only). · FESTO_MCP_PYTHON=Optional. Python interpreter for the XSD/semantic validators and hardware tools (needs lxml). 1 0.0 %
FETCHMUX_API_KEY=Bearer key for the gateway's protected routes. · FETCHMUX_BASE_URL=Base URL of the self-hosted FetchMux gateway. 1 0.0 %
FETCHPET_DOWNLOAD_DIR=Directory to save downloaded documents (EOB, invoices). · FETCHPET_PASSWORD=Your Fetch Pet account password. · FETCHPET_USERNAME=Your Fetch Pet account email address. · HEADLESS=Run browser in headless mode (true/false). · TIMEOUT=Browser operation timeout in milliseconds. 1 0.0 %
FETCHSANDBOX_BASE_URL=Override the FetchSandbox backend base URL (defaults to https://fetchsandbox.com). Useful for stage/self-hosted testing. · FETCHSANDBOX_TELEMETRY=Set to '0' to disable anonymous usage telemetry. 1 0.0 %
FETTLE_API_KEY=Fettle API key (Settings → API Keys at https://fettle.sh). Read scope lists and inspects; write scope is needed to create, change or pause anything. · FETTLE_API_URL=Base URL of the Fettle API. Only set this to point the server at something other than production. · FETTLE_TIMEOUT_MS=How long one tool call may take before it is abandoned. 1 0.0 %
FFMPEG_MICRO_API_KEY=API key from https://www.ffmpeg-micro.com/dashboard/api-keys 1 0.0 %
FHIRFLY_API_KEY=FHIRfly API key (get one at https://fhirfly.io) 1 0.0 %
FHIR_ACTIVE_KEY=Base64-encoded PKCS#8 private signing key. Required when FHIR_AUTH=smart. · FHIR_AUTH=FHIR authentication mode. Use none only for an unauthenticated FHIR endpoint. · FHIR_CLIENT_ID=SMART Backend Services client ID. Required when FHIR_AUTH=smart. · FHIR_JWKS_URL=Externally reachable JWKS URL for the signing key. Recommended for SMART authentication over stdio. · FHIR_SERVER_URL=Full base URL of the FHIR API, such as https://fhir.example.org/fhir/R4. · FHIR_TOKEN_URL=SMART Backend Services token endpoint. Required when FHIR_AUTH=smart unless it can be derived from FHIR_BASE_URL. · FHIR_VERSION=FHIR release used for FHIRPath and response shaping. · MCP_TRANSPORT=Run the installed package over MCP stdio. 1 0.0 %
FHIR_BASE_URL=Base URL of the FHIR R4 server (default: https://hapi.fhir.org/baseR4) · SMART_ENABLED=Set to 'true' to enable SMART-on-FHIR OAuth 2.0 (Epic/Cerner) 1 0.0 %
FHIR_SERVER_BASE_URL=Base URL of the FHIR Server (eg: https://hapi.fhir.org/baseR5) 1 0.0 %
FHV_API_KEY=API key from matchuplabs.com (product='fhv-intelligence') · FHV_BASE_URL=API base URL (default: https://fhv.matchup.dev) 1 0.0 %
FIBER_API_KEY=Bearer token for the FIBER API. Role determines which tools work: viewer (24 read tools), operator (+write), admin (all). · FIBER_API_URL=Base URL of the FIBER deployment (e.g., https://api.fiber.ac or http://localhost:8000 for self-hosted). · FIBER_ENABLE_WRITE=Set to 1 to expose write tools: demo trigger, NCCL ingest, RMA create. Defaults to read-only for safety. · FIBER_HTTP_TIMEOUT=Per-request HTTP timeout in seconds. Increase if running Digital Twin Monte Carlo with iterations>1000. · FIBER_MCP_TOOLS_ALLOWLIST=(v1.0.2) Optional CSV of tool names. When set, only these tools are exposed — letting operators scope autonomous agents to a minimum surface (e.g. 'fiber_health,fiber_cluster_overview,fiber_list_alerts'). Empty = all tools exposed (default). 1 0.0 %
FIBER_RPC_URL=Fiber Network RPC URL 1 0.0 %
FIBX_API_URL=Custom fibx-server URL for Privy wallet operations. Optional; only needed when self-hosting the backend. · FIBX_SESSION_SECRET=Encryption key for the local session file. Optional; auto-generated per machine when unset. 1 0.0 %
FIC_ACCESS_TOKEN=Fatture in Cloud API access token · FIC_COMPANY_ID=Fatture in Cloud company ID · FIC_SENDER_EMAIL=Email sender for courtesy copies 1 0.0 %
FIDACY_ENGINE_API_KEY=Optional: enables signed trust verdicts (assess_action) and anchors session digests. · FIDACY_MODE=Optional: 'http' for the hosted core. · FIDACY_OPERATOR_EMAIL=Optional and opt-in: registers this install so the operator can claim its history. 1 0.0 %
FIDACY_ENGINE_API_KEY=Optional: enables signed trust verdicts (assess_action). · FIDACY_MODE=Optional: 'http' for the hosted paid core. 1 0.0 %
FIDENSA_API_KEY=API key for full access. Free registration. Not required for check or search. 1 0.0 %
FIGBRIDGE_PORT=Preferred TCP port for the local HTTP+SSE bridge that the Figma plugin connects to. Defaults to 7331. If the port is in use, the bridge walks 7331..7340 automatically. 1 0.0 %
FIGMA_ACCESS_TOKEN=Figma Personal Access Token for API authentication. Get yours at https://www.figma.com/developers/api#access-tokens 1 0.0 %
FIGMA_ACCESS_TOKEN=Figma personal access token (File content → Read only). Only needed when comparing against Figma URLs — screenshot comparisons via designImage need no token. 1 0.0 %
FIGMA_ACCESS_TOKEN=Your personal access token for the Figma API 1 0.0 %
FIGMA_API_KEY=Figma personal access token 1 0.0 %
FIGMA_BRIDGE_PORT=WebSocket bridge port (default: 3055) · FIGMA_TOKEN=Figma Personal Access Token 1 0.0 %
FIGMA_TOKEN=Figma personal access token (read-only). Only needed for the REST path — not required when the Plumb plugin is paired in Figma desktop. Create one at figma.com → Settings → Security → Personal access tokens. · PLUMB_SESSION_NAME=Optional label shown in the Plumb Figma plugin when multiple plumb-mcp servers are paired with the same plugin (multi-agent connect). Defaults to the basename of the current working directory. 1 0.0 %

This sheet lists 50 of 5,626 values; they cover 50 entries.

Sheet 43 of 113, 5,626 values in total.

Counted from the projection, the same table the list filters on. An entry counts once per value.

tracevero · https://tracevero.com/werkzeuge/merkmal/mcp/roh_umgebungsbeschreibungen?seite=43