{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ni-c/mcp-hub","description":"Many stdio MCP servers from one container, published over HTTPS with OAuth 2.1 for any MCP client","title":"mcp-hub","repository":{"url":"https://github.com/ni-c/mcp-hub","source":"github"},"version":"0.12.0","websiteUrl":"https://mcp-hub.ni-c.de","packages":[{"registryType":"npm","identifier":"@ni-c/mcp-hub","version":"0.12.0","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"type":"positional","value":"--stdio"}],"environmentVariables":[{"description":"Path to the mcp.json listing the servers to expose, in Claude Code's mcpServers format (default mcp.json in the working directory)","format":"string","name":"CONFIG_PATH"},{"description":"Minutes of inactivity before a server is put to sleep; 0 starts every server at launch and keeps it running (default 60)","format":"number","default":"60","name":"IDLE_TIMEOUT_MINUTES"},{"description":"Tool snapshots of sleeping servers (default .mcp-hub/tool-cache.json beside the config)","format":"string","name":"TOOL_CACHE_PATH"},{"description":"Mirror the hub's log lines into this file; stdout carries the protocol, so logging goes to stderr otherwise","format":"string","name":"LOG_FILE"}]},{"registryType":"oci","identifier":"ghcr.io/ni-c/mcp-hub:0.12.0","transport":{"type":"streamable-http","url":"http://localhost:{PORT}/hub"},"environmentVariables":[{"description":"Public base URL exactly as clients see it, e.g. https://mcp.example.net (no path)","isRequired":true,"format":"string","name":"EXTERNAL_URL"},{"description":"bcrypt hash of the OAuth login password (htpasswd -bnBC 10 \"\" 'pw' | tr -d ':\\n')","isRequired":true,"format":"string","isSecret":true,"name":"PASSWORD_HASH"},{"description":"Set to totp to ask for a one-time code from an authenticator app at every sign-in. Default off.","format":"string","name":"TWO_FACTOR"},{"description":"Base32 secret the authenticator app was set up with (mcp-hub-admin totp init). Read only when TWO_FACTOR is totp.","format":"string","isSecret":true,"name":"TOTP_SECRET"},{"description":"Comma-separated IPs/CIDRs of the reverse proxy allowed to set X-Forwarded-* headers","format":"string","name":"TRUSTED_PROXIES"},{"description":"Which mechanisms a client may use to obtain a client_id: cimd (Client ID Metadata Documents), dcr (RFC 7591 dynamic registration), or both","format":"string","default":"cimd,dcr","name":"CLIENT_REGISTRATION"},{"description":"Comma-separated https origins whose client ID metadata documents are accepted, e.g. https://chatgpt.com; unset admits every https origin","format":"string","name":"CIMD_ALLOWED_ORIGINS"},{"description":"Listen port inside the container","format":"number","default":"80","name":"PORT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-11-03T13:46:35.749504Z","publishedAt":"2026-11-03T13:46:35.749504Z","updatedAt":"2026-11-03T13:46:35.749504Z","isLatest":true}}}