| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |
| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |
| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |
| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |
| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |
| MM_MCP_ALLOW_WRITES | No | Offer the tools that post and change things. Each change others see asks you before it acts, which needs a client that shows MCP elicitation questions; following a thread, saving a post or a draft, reminders and typing do not ask. |
| MM_MCP_ASK_BEFORE_WRITES | No | mm-mcp asks you before each change others see. Turn it off only where your client does not show mm-mcp's question, and its own approval of each tool call is to be the check instead: a client that approves tools by itself then posts as you with nobody seeing it first. |
| MM_MCP_CA_FILE | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
| MM_MCP_DOWNLOAD_DIR | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
| MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | Only with Ask before posting off: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
| MM_MCP_MARK_AI_GENERATED | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
| MM_MCP_RESOURCE_MAX_MB | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
| MM_TOKEN | No | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. Secret. |
| MM_URL | Yes | The address you open Mattermost at, such as https://chat.example.com. |