1. Conduid
  2. Developer Tools
  3. Envmcp
MCP server · Developer Tools

Envmcp

A lightweight way to use environment variables in your Cursor MCP server definitions.

Unclaimed MIT last commit a year ago devtools
59Fair

Scored 12 days ago · breakdown

About Envmcp

Envmcp is an MCP server published by griffithsbs in the Developer Tools category: a lightweight way to use environment variables in your Cursor MCP server definitions.

The repository has 32 stars and 9 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/griffithsbs/envmcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Envmcp

Powered by Claude · Grounded in docs

I know everything about Envmcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 5 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.2.1v0.2.1 · 19 Jun 2025Full Changelog: https://github.com/griffithsbs/envmcp/compare/v0.2.0...v0.2.1
v0.2.0v0.2.0 · 26 Apr 2025What's Changed Support custom env filepath by @griffithsbs in https://github.com/griffithsbs/envmcp/pull/2 Full Changelog: https://github.com/griffithsbs/envmcp/compare/v0.1.2...v0.2.0
v0.1.2v0.1.2 · 25 Apr 2025https://www.npmjs.com/package/envmcp/v/0.1.2 Full Changelog: https://github.com/griffithsbs/envmcp/compare/v0.1.1...v0.1.2
v0.1.1v0.1.1 · 25 Apr 2025https://www.npmjs.com/package/envmcp/v/0.1.1 Full Changelog: https://github.com/griffithsbs/envmcp/compare/v0.1.0...v0.1.1
v0.1.0v0.1.0 · 25 Apr 2025https://www.npmjs.com/package/envmcp/v/0.1.0 Full Changelog: https://github.com/griffithsbs/envmcp/commits/v0.1.0

README

envmcp

npm version total downloads

Use environment variables in your Cursor MCP server definitions.

💡 Looking for more features? Consider mcpipe (npm) which includes envmcp's functionality as well as debugging tools and other capabilities.

Quick Start

# Use default ~/.env.mcp file
npx envmcp your-mcp-server $DATABASE_URL

# Specify custom env file
npx envmcp --env-file .env your-mcp-server $API_KEY $DATABASE_URL

# Short flag version
npx envmcp -e /path/to/secrets.env your-mcp-server $MY_SECRET

Usage in MCP Clients

Prefix your server command with envmcp.

Before (secrets exposed in config):

{
  "my_database": {
    "command": "my-mcp-server",
    "args": ["postgresql://user:password@hostname/db"]
  }
}

After (secrets in ~/.env.mcp):

{
  "my_database": {
    "command": "npx",
    "args": ["envmcp", "my-mcp-server", "$DATABASE_URL"]
  }
}

How It Works

  1. Looks for .env.mcp in current directory, then parent directories, finally ~/.env.mcp
  2. If --env-file is specified, uses that file instead
  3. Loads environment variables from the file
  4. Replaces $VARIABLE_NAME references in your command arguments
  5. Executes the command with substituted values

Installation

npm install -g envmcp

Options

  • --env-file <path>, -e <path>: Specify custom environment file path

Environment File Format

DATABASE_URL=postgresql://user:password@localhost/db
API_KEY=your-secret-api-key
# This is a comment
QUOTED_VALUE="value with spaces"

See sample.env.mcp for more examples.

License

MIT

README fetched from the repository 5 days ago. The original is authoritative.

Questions

About Envmcp

How do I install Envmcp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Envmcp safe to use with an AI agent?

Its trust score is 59 out of 100 (fair). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Envmcp still maintained?

The last commit was a year ago and 3 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.