Configuration - visubramaniam/vsp360-mcp GitHub Wiki

All settings are environment variables, set in the MCP client's configuration for the server. Only the first three are required.

Connection

Variable	Default	Description
`VSP360_URL`	(required)	Base URL, e.g. `https://vsp360.example.com`
`VSP360_CLIENT_ID`	(required)	Service account client ID
`VSP360_CLIENT_SECRET`	(required)	Service account client secret
`VSP360_SCOPE`		Optional OAuth scope
`VSP360_CA_CERT`		PEM file of the CA that signed the VSP 360 certificate
`VSP360_INSECURE_TLS`	`false`	Skip TLS verification. Lab systems with self-signed certificates only.
`VSP360_ALLOW_HTTP`	`false`	Allow an `http://` `VSP360_URL`, which sends the client secret and tokens unencrypted
`VSP360_TIMEOUT_MS`	`120000`	Request timeout; uploads are exempt

What Claude may do

Variable	Default	Description
`VSP360_ALLOW_WRITES`	`false`	Allow operations that change state
`VSP360_ALLOW_SECRET_READS`	`false`	Allow the three operations that return a live client secret (see Safety and Security)
`VSP360_TOOLSETS`	(none)	Comma-separated API areas to expose as direct tools (see below)

Files

Variable	Default	Description
`VSP360_DOWNLOAD_DIR`	`~/Downloads/vsp360-mcp`	Where binary downloads and `save_to` files are written
`VSP360_SAVE_ANYWHERE`	`false`	Let `save_to` write outside `VSP360_DOWNLOAD_DIR`
`VSP360_UPLOAD_DIR`	(any non-hidden path)	Only allow uploads from inside this folder. In read-only mode, uploads are refused unless it's set.

Responses and data files

Variable	Default	Description
`VSP360_MAX_RESPONSE_CHARS`	`60000`	Text responses longer than this are truncated, with a note on how to narrow the request
`VSP360_MAX_RESPONSE_BYTES`	`67108864` (64 MiB)	Most bytes read into memory from one response, or from all pages of an `all_pages` call. Larger responses fail with a suggestion to use `save_to`, which streams to disk
`VSP360_PATH_REWRITES`	`/api/v1/protection=/dataprotection/api/v1/protection`	Path prefixes to rewrite, as comma-separated `/from=/to` pairs. The default fixes the Data Protection service's pagination links.
`VSP360_SPEC`	bundled spec	A different OpenAPI file, e.g. for a newer VSP 360 release
`VSP360_EXAMPLES`	bundled `spec/examples.json`	Example questions used to rank search results; an empty string turns them off
`VSP360_ANALYTICS_FIELDS`	bundled `spec/analytics-fields.json`	MQL field reference added to `analyticsRunQuery`

Search-improvement tools (optional)

None of these is needed to use the server. See Development.

Variable	Default	Description
`VSP360_DECISION_LOG`	(off)	JSON Lines file logging each search, describe and call
`VSP360_DECISION_LINK_SECONDS`	`120`	How soon after a search a describe or call is linked to it
`VSP360_DECISION_COLLECT`	`false`	Collection mode (needs the log)
`VSP360_DECISION_COLLECT_SECONDS`	`600`	In collection mode, how long a search keeps its results callable
`VSP360_DECISION_HINT`	`false`	`true` adds a learned next-step suggestion to search results; `ab` adds it in a random half of sessions
`VSP360_DECISION_MODEL`	bundled `spec/decision-model.json`	The model behind the hint

API areas for `VSP360_TOOLSETS`

Each area you list becomes one direct tool per operation, with a full input schema. Pick the few you use most. all adds 264 tools and about 400 KB of definitions to every conversation, which isn't recommended.

Users · Groups · Group Access · Service Accounts · Roles · Identity Providers · Active Directory · Authentication Settings · Authorization · Access Catalog · Access Policies · Privileged Access Management · Block Single Sign-On · Device Registration · Device Registry · Device Operation Jobs · File and Object Device Registration · Host and Hypervisor Discovery · Platform Alerts · VSP 360 Cluster Health · Logs · Diagnostics · Platform Profiles · Resource Management · Platform Upgrade · Application Lifecycle · TLS Certificates · Trusted CA Certificates · Notifications · Usage and Billing Reports · Product Information · Data Protection / Copies · Data Protection / Policies · Orchestration / Execute Workflows · Analytics / Query API

Write operations get no direct tool unless VSP360_ALLOW_WRITES=true.

Recommended setups

Use	Settings
Day-to-day monitoring	defaults, plus `VSP360_TOOLSETS="Platform Alerts,VSP 360 Cluster Health,Device Registry"`
Unattended or shared	defaults, `VSP360_UPLOAD_DIR` set to an empty folder, a service account with read-only VSP 360 access
Administration	`VSP360_ALLOW_WRITES=true`, `VSP360_UPLOAD_DIR` set, and a client that asks before each tool call
Lab with a self-signed certificate	`VSP360_INSECURE_TLS=true`, or better, `VSP360_CA_CERT`