← Index

MediaWiki MCP Server

io.github.ProfessionalWiki/mediawiki-mcp-server·v0.12.0·Other

MCP server enabling AI clients to interact with any MediaWiki wiki through standard tools

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
CONFIG

Path to your configuration file

MCP_ALLOW_STATIC_FALLBACK

Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests.

MCP_CONTENT_MAX_BYTES

Byte cap for content bodies (wikitext, rendered HTML, diffs) returned by get-page, get-pages, parse-wikitext, and compare-pages. Oversized bodies are truncated with a trailing marker.

MCP_FILE_DATA_MAX_BYTES

Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate.

MCP_LOG_LEVEL

Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call.

MCP_MAX_REQUEST_BODY

Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb.

MCP_METRICS

Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport.

MCP_OAUTH_CREDENTIALS_FILE

Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows.

MCP_OAUTH_NO_BROWSER

Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI.

MCP_PUBLIC_URL

Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host.

MCP_SESSION_IDLE_TIMEOUT

Seconds an HTTP session may sit idle before it is closed and removed on the StreamableHTTP transport. Any request resets the timer. Set to 0 to disable expiry.

MCP_SHUTDOWN_GRACE_MS

Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000.

MCP_TRANSPORT

Type of MCP server transport

MCP_UPLOAD_MAX_BYTES

Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize.

PORT

Port used for StreamableHTTP transport

CONFIG

Path to your configuration file

MCP_ALLOW_STATIC_FALLBACK

Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests.

MCP_CONTENT_MAX_BYTES

Byte cap for content bodies (wikitext, rendered HTML, diffs) returned by get-page, get-pages, parse-wikitext, and compare-pages. Oversized bodies are truncated with a trailing marker.

MCP_FILE_DATA_MAX_BYTES

Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate.

MCP_LOG_LEVEL

Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call.

MCP_MAX_REQUEST_BODY

Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb.

MCP_METRICS

Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport.

MCP_OAUTH_CREDENTIALS_FILE

Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows.

MCP_OAUTH_NO_BROWSER

Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI.

MCP_PUBLIC_URL

Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host.

MCP_SESSION_IDLE_TIMEOUT

Seconds an HTTP session may sit idle before it is closed and removed on the StreamableHTTP transport. Any request resets the timer. Set to 0 to disable expiry.

MCP_SHUTDOWN_GRACE_MS

Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000.

MCP_TRANSPORT

Type of MCP server transport

MCP_UPLOAD_MAX_BYTES

Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize.

PORT

Port used for StreamableHTTP transport

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
15
installability
25
documentation
15
stability
5
Alternatives in Other