Partiri Cloud MCP Server

Item: Partiri Cloud MCP Server
Rating: 74
Author: M8ven

MCP server for the Partiri Cloud PaaS platform. Enables AI agents to manage workspaces, projects, services, deployments, and metrics.

→ Partiri-Cloud/harbor-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: MCP_MAX_SESSIONS_PER_KEY, MCP_TOKEN_SECRET, PARTIRI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMCP_ALLOWED_ORIGINS

configMCP_ALLOWED_REDIRECT_HOSTS— No — Comma-separated OAuth redirect hosts allowed in addition to loopback

configMCP_BASE_URL— HTTP prod http://localhost:{PORT} Public URL of the MCP server

configMCP_DATA_DIR— No — Persistent dir for client registrations + token secret (survives restarts; single-replica)

configMCP_MAX_SESSIONS— No 1000 Max concurrent MCP sessions

🔐 secretMCP_MAX_SESSIONS_PER_KEY— No 5 Max sessions per API key

configMCP_READONLY— No false When truthy, only read-only tools are registered

configMCP_SESSION_TTL_MINUTES— No 30 Session inactivity timeout

🔐 secretMCP_TOKEN_SECRET— $(openssl rand -hex 32) \

configMCP_TOOLS_ALLOWLIST— No — Comma-separated tool names to enable on top of the base set

configMCP_TOOLS_DENYLIST— No — Comma-separated tool names to remove (wins over allowlist)

configMCP_TRANSPORT— stdio (default) Local CLI / direct integration =stdio or omit

configMCP_TRUSTED_PROXIES— HTTP prod loopback Trusted proxy IP(s)/CIDR(s) for client-IP rate limiting; set to your ingress so X-Forwarded-For can't be spoofed

🔐 secretPARTIRI_API_KEY— your-key npx tsx src/index.ts

configPARTIRI_API_URL— No https://api.partiri.cloud Partiri API base URL (must be HTTPS)

configPARTIRI_TIMEOUT— No 30 API request timeout in seconds

configPARTIRI_WEB_URL— 3. The client opens /authorize, which redirects the browser to the hosted Partiri sign-in page (/cli-auth) with a short state and the server's public callback URL

configPORT— No 3000 HTTP server port

configXDG_CONFIG_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/partiri-cloud-harbor-mcp-7rvamo)](https://m8ven.ai/mcp/partiri-cloud-harbor-mcp-7rvamo)

commit: 3257fd71e48914772711c263b2bcdcd29052e6d4

code hash: fb44443965bf8c2ce4641684ea4f4b3cfabe41d35a008c3eb85bd423d32f8a3e

verified: 7/17/2026, 8:25:51 AM

view raw JSON →