| CONFIG | No | Path to your configuration file |
| MCP_ALLOW_STATIC_FALLBACK | No | Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests. |
| MCP_CONTENT_MAX_BYTES | No | Byte cap for the content bodies and result blocks tools return (wikitext, rendered HTML, diffs, statement and row listings). An oversized response is truncated with a trailing marker describing what was left out. |
| MCP_FILE_DATA_MAX_BYTES | No | Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate. |
| MCP_LOG_LEVEL | No | Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call. |
| MCP_MAX_REQUEST_BODY | No | Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb. |
| MCP_METRICS | No | Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport. |
| MCP_OAUTH_ALLOWED_REDIRECTS | No | Additional allowed redirect URIs for hosted-proxy client registration: comma-separated exact URIs (which must include a host) and https prefix patterns ending in /*. Loopback, claude.ai, and verified first-party clients (ChatGPT, Cursor, VS Code) are always allowed; unset means no additional clients. |
| MCP_OAUTH_CIMD_ALLOWED_HOSTS | No | Comma-separated additional client_id document hosts trusted for CIMD (bare host or host:port). Verified first-party hosts are always trusted. |
| MCP_OAUTH_CREDENTIALS_FILE | No | Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows. |
| MCP_OAUTH_NO_BROWSER | No | Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI. |
| MCP_OAUTH_PROXY_STORE_FILE | No | Path to the hosted OAuth proxy's encrypted state file, which lets sign-ins survive restarts. Default: proxy-store.enc under the mediawiki-mcp config dir; /app/data/proxy-store.enc in the Docker image. |
| MCP_PUBLIC_URL | No | Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host. |
| MCP_SHUTDOWN_GRACE_MS | No | Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000. |
| MCP_TRANSPORT | No | Type of MCP server transport |
| MCP_UPLOAD_MAX_BYTES | No | Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize. |
| MCP_USER_AGENT | No | Replaces the User-Agent header of every outbound request, which defaults to mediawiki-mcp-server/<version> (https://github.com/ProfessionalWiki/MediaWiki-MCP-Server). If you set it, give a name and an email or URL, e.g. 'ExampleBot/1.0 (bot@example.org)'. |
| PORT | No | Port used for StreamableHTTP transport |
| CONFIG | No | Path to your configuration file |
| MCP_ALLOW_STATIC_FALLBACK | No | Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests. |
| MCP_CONTENT_MAX_BYTES | No | Byte cap for the content bodies and result blocks tools return (wikitext, rendered HTML, diffs, statement and row listings). An oversized response is truncated with a trailing marker describing what was left out. |
| MCP_FILE_DATA_MAX_BYTES | No | Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate. |
| MCP_LOG_LEVEL | No | Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call. |
| MCP_MAX_REQUEST_BODY | No | Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb. |
| MCP_METRICS | No | Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport. |
| MCP_OAUTH_ALLOWED_REDIRECTS | No | Additional allowed redirect URIs for hosted-proxy client registration: comma-separated exact URIs (which must include a host) and https prefix patterns ending in /*. Loopback, claude.ai, and verified first-party clients (ChatGPT, Cursor, VS Code) are always allowed; unset means no additional clients. |
| MCP_OAUTH_CIMD_ALLOWED_HOSTS | No | Comma-separated additional client_id document hosts trusted for CIMD (bare host or host:port). Verified first-party hosts are always trusted. |
| MCP_OAUTH_CREDENTIALS_FILE | No | Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows. |
| MCP_OAUTH_NO_BROWSER | No | Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI. |
| MCP_OAUTH_PROXY_STORE_FILE | No | Path to the hosted OAuth proxy's encrypted state file, which lets sign-ins survive restarts. Default: proxy-store.enc under the mediawiki-mcp config dir; /app/data/proxy-store.enc in the Docker image. |
| MCP_PUBLIC_URL | No | Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host. |
| MCP_SHUTDOWN_GRACE_MS | No | Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000. |
| MCP_TRANSPORT | No | Type of MCP server transport |
| MCP_UPLOAD_MAX_BYTES | No | Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize. |
| MCP_USER_AGENT | No | Replaces the User-Agent header of every outbound request, which defaults to mediawiki-mcp-server/<version> (https://github.com/ProfessionalWiki/MediaWiki-MCP-Server). If you set it, give a name and an email or URL, e.g. 'ExampleBot/1.0 (bot@example.org)'. |
| PORT | No | Port used for StreamableHTTP transport |