Scholar MCP MCP Server

Persistent-state backend URL shared by every pvl-core subsystem that needs state. `memory://` is in-process and lost on restart; `file:///path` persists on one server; `redis://`, `dynamodb://` and `mongodb://` each need their matching extra. When unset, defaults to `file:///data/state` (the volume family Docker images mount), or to `memory://` (with a warning) on a host where that directory is not usable.

Comma-separated explicit tool names this instance exposes; every other tool is hidden from listings and cannot be invoked. Names matching no registered tool are inert. Mutually exclusive with `tools_deny`. Takes effect through `apply_tool_visibility`.

Comma-separated explicit tool names hidden from this instance (absent from listings, cannot be invoked). Names matching no registered tool are inert. Mutually exclusive with `tools_allow`. Takes effect through `apply_tool_visibility`.

Rename this server instance; defaults to the project name.

Concise routing context that distinguishes this deployment's material or responsibility.

Deployment-specific behavioral policy added to the generated MCP instructions.

Legacy: replaces all generated MCP instructions (deprecated; use _INSTANCE_DESCRIPTION for routing and _INSTRUCTIONS_EXTRA for policy).

Log level for FastMCP internals and app loggers (DEBUG / INFO / WARNING / ERROR / CRITICAL). The -v CLI flag overrides to DEBUG.

Set false for plain or structured JSON log output.

GitHub token used to raise rate limits when fetching standards documents from GitHub. Optional; unauthenticated requests work at reduced limits.

When true, write-tagged tools (PDF download and conversion cache writes) are hidden. Set false to enable them.

Semantic Scholar API key. Optional but strongly recommended: unauthenticated requests are limited to ~1 req/s. Request one at https://www.semanticscholar.org/product/api#api-key-form.

Base URL of a running docling-serve instance for PDF conversion (e.g. http://localhost:5001). When unset, PDF conversion tools return an error.

OpenAI-compatible VLM endpoint for formula and figure enrichment during PDF conversion.

API key for the VLM endpoint.

Model name to use with the VLM endpoint.

Directory for the SQLite cache database (cache.db) and downloaded PDFs (pdfs/, md/).

Contact email for the OpenAlex polite pool (improves rate limits). Also enables Unpaywall lookups as a PDF fallback source.

EPO Open Patent Services consumer key. Optional; patent tools are hidden when unset. Register at https://developers.epo.org/user/register.

EPO Open Patent Services consumer secret. Optional; patent tools are hidden when unset.

Google Books API key. Optional; book tools work unauthenticated at reduced rate limits.

Seconds a long-running tool call may run in the foreground before it is promoted to a background job and a job handle is returned instead.

Seconds a background-job record (working or finished) is retained for polling before it expires from the store.

Maximum live background jobs per calling subject; further promotions are rejected until older records expire.

Public base URL of the deployed server, for example `https://mcp.example.com`. Required for OIDC. Also the fallback source of the MCP Apps domain when `app_domain` is unset.

Single shared bearer token; enables bearer auth unless `bearer_tokens_file` is set, which takes precedence.

OIDC discovery document URL, for example `https://auth.example.com/.well-known/openid-configuration`.

OIDC client identifier registered with the provider.

OIDC client secret registered with the provider.

Expected `aud` claim; tokens issued for another audience are rejected.

Scopes a caller must present, space- or comma-separated. Defaults to `openid` in oidc-proxy mode.

Scopes advertised to MCP clients in protected-resource metadata, space- or comma-separated. Overrides the default `openid offline_access`; `oidc_required_scopes` is always added on top. Set this when the registered client is not permitted `offline_access`, or to have clients request extra claim scopes (such as `groups`) without also requiring them in every token.

Signing key for issued tokens; used in oidc-proxy mode only. When unset, the key is derived deterministically from `oidc_client_secret`, so tokens survive a restart. Rotating that secret then invalidates every issued token. Set this explicitly to decouple token validity from secret rotation. Generate with `openssl rand -hex 32`.

Validate the access token instead of the id token.

MCP Apps iframe domain, used for CSP sandboxing. Overrides the host derived from `base_url`.

Explicit auth-mode override, accepting `remote` or `oidc-proxy` (case- and whitespace-insensitive). When unset the mode is auto-detected from which auth variables are set; the override exists because having all four OIDC variables set is ambiguous between those two modes. Other values are ignored with a warning.

Path to a TOML file mapping bearer tokens to subjects; overrides the single-token `bearer_token` mode.

Subject assigned to the single-token bearer mode; ignored when `bearer_tokens_file` is set, since mapped mode carries per-token subjects.

Mount path for the MCP endpoint; the health routes derive their prefix from it.

How much the unauthenticated /health and /health/ready bodies say: status, standard (adds name, version and per-check verdicts), or full (adds redacted reasons; trusted networks only).

Run the server process as this UID; the container entrypoint reassigns ownership of writable paths to match.

Run the server process as this GID; pair with PUID to match the owner of a mounted volume.