Parallels RAS MCP Server

Item: Parallels RAS MCP Server
Rating: 74
Author: M8ven

A read-only MCP server that provides visibility into Parallels Remote Application Server infrastructure, policies, and sessions through the RAS REST API. It enables AI assistants to query site settings, published applications, and license status without performing any modifications.

→ RMITBLOG/ParallelsRAS_MCP · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: MCP_HTTP_BEARER_TOKEN, RAS_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretMCP_HTTP_BEARER_TOKEN— HTTP only — Bearer token clients must present in Authorization: Bearer …. Server refuses to start without it. Generate with openssl rand -hex 32.

configMCP_HTTP_HOST— No 127.0.0.1 Bind address. Set to 0.0.0.0 to expose on all interfaces (front with TLS termination).

configMCP_HTTP_PORT— No 3000 Listen port.

configMCP_TRANSPORT— Two transports are supported, selected via the environment variable:

configRAS_HOST— Yes — RAS server hostname or IP address

configRAS_IGNORE_TLS— No true Skip TLS certificate verification (for self-signed certs)

🔐 secretRAS_PASSWORD— Yes — Administrator password

configRAS_PORT— No 20443 REST API port

configRAS_USERNAME— Yes — Administrator username

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/rmitblog-parallelsras-mcp-vygg0x)](https://m8ven.ai/mcp/rmitblog-parallelsras-mcp-vygg0x)

commit: f51abb44a4138bb5b12d671620d99486f12af6ae

code hash: a46fada72da537df60801c1ea37e26a7af3b11c89915344f2f12873963b21706

verified: 6/13/2026, 10:40:50 AM

view raw JSON →