MCPLow riskUnclaimed

Symfony Agent MCP

Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more.

shakaranshakaran/symfony-agent-mcpUpdated Aug 23, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.shakaran/symfony-agent-mcp",
  "description": "Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more.",
  "title": "Symfony Agent MCP",
  "repository": {
    "url": "https://github.com/shakaran/symfony-agent-mcp",
    "source": "github"
  },
  "version": "1.0.2",
  "websiteUrl": "https://github.com/shakaran/symfony-agent-mcp",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@shakaran/symfony-agent-mcp",
      "version": "1.0.2",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000).",
          "format": "boolean",
          "default": "true",
          "name": "SYMFONY_MCP_DYNAMIC_TOOLS"
        },
        {
          "description": "Token ceiling for the schemas a session may have active at once.",
          "format": "number",
          "default": "40000",
          "name": "SYMFONY_MCP_TOKEN_BUDGET"
        },
        {
          "description": "Colon-separated allowlist of directories the server may read. Any app_path outside them is refused.",
          "format": "filepath",
          "name": "SYMFONY_MCP_ALLOWED_PATHS"
        },
        {
          "description": "Enables session-token authentication. Unset, authentication is off.",
          "format": "string",
          "isSecret": true,
          "name": "SYMFONY_MCP_SESSION_SECRET"
        },
        {
          "description": "Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set.",
          "format": "string",
          "isSecret": true,
          "name": "SYMFONY_MCP_SESSION_TOKEN"
        },
        {
          "description": "Encrypted audit log of every tool call.",
          "format": "boolean",
          "default": "true",
          "name": "SYMFONY_MCP_AUDIT"
        },
        {
          "description": "Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit.",
          "format": "boolean",
          "default": "true",
          "name": "SYMFONY_MCP_DLP"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:@shakaran/symfony-agent-mcp@1.0.2
Runs install scripts—None
NetworkNoneNone
Needs credentialsSYMFONY_MCP_SESSION_SECRETSYMFONY_MCP_SESSION_TOKENSYMFONY_MCP_SESSION_SECRETSYMFONY_MCP_SESSION_TOKEN
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #11.0.2latestOct 7, 2026