Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000).
SYMFONY_MCP_TOKEN_BUDGET
No
Token ceiling for the schemas a session may have active at once.
SYMFONY_MCP_ALLOWED_PATHS
No
Colon-separated allowlist of directories the server may read. Any app_path outside them is refused.
SYMFONY_MCP_SESSION_SECRET
No
Enables session-token authentication. Unset, authentication is off. Secret.
SYMFONY_MCP_SESSION_TOKEN
No
Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set. Secret.
SYMFONY_MCP_AUDIT
No
Encrypted audit log of every tool call.
SYMFONY_MCP_DLP
No
Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit.