io.github.cyanheads/ntfy-mcp-server

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-14T09:15:45.434873Z",
      "publishedAt": "2026-11-14T09:15:45.434873Z",
      "statusChangedAt": "2026-11-14T09:15:45.434873Z"
    }
  },
  "server": {
    "name": "io.github.cyanheads/ntfy-mcp-server",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "2.4.1",
    "packages": [
      {
        "version": "2.4.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "ntfy-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "NTFY_SERVERS",
            "format": "string",
            "description": "JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand."
          },
          {
            "name": "NTFY_BASE_URL",
            "format": "string",
            "default": "https://ntfy.sh",
            "description": "Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset."
          },
          {
            "name": "NTFY_DEFAULT_TOPIC",
            "format": "string",
            "description": "Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe."
          },
          {
            "name": "NTFY_AUTH_TOKEN",
            "format": "string",
            "description": "Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD."
          },
          {
            "name": "NTFY_AUTH_USERNAME",
            "format": "string",
            "description": "Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD."
          },
          {
            "name": "NTFY_AUTH_PASSWORD",
            "format": "string",
            "description": "Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME."
          },
          {
            "name": "NTFY_REQUEST_TIMEOUT_MS",
            "format": "string",
            "default": "15000",
            "description": "Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts."
          },
          {
            "name": "NTFY_MAX_RETRIES",
            "format": "string",
            "default": "3",
            "description": "Max retry attempts for transient upstream failures (5xx, network, 429)."
          },
          {
            "name": "NTFY_BLOCK_PRIVATE_HOSTS",
            "format": "string",
            "default": "false",
            "description": "When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server."
          },
          {
            "name": "NTFY_CLAMP_LIMITS",
            "format": "string",
            "default": "true",
            "description": "When true, a `limit` above a tool's per-call cap (100 for ntfy_fetch_messages, 200 for ntfy_search_emoji_tags) is served as the cap with a notice, and the input schema advertises no maximum. Set to false to advertise and enforce a schema maximum at the cap instead, so a larger value is rejected."
          },
          {
            "name": "NTFY_ENABLE_EMOJI_TAGS",
            "format": "string",
            "default": "true",
            "description": "Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          },
          {
            "name": "LOGS_DIR",
            "format": "string",
            "default": "./logs",
            "description": "Directory for file-based logs (Node only; ignored on Workers)."
          },
          {
            "name": "OTEL_ENABLED",
            "format": "string",
            "default": "false",
            "description": "Enable OpenTelemetry instrumentation (spans, metrics, completion logs)."
          }
        ]
      },
      {
        "version": "2.4.1",
        "transport": {
          "url": "http://127.0.0.1:3010/mcp",
          "type": "streamable-http"
        },
        "identifier": "ntfy-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "MCP_TRANSPORT_TYPE",
            "value": "http",
            "format": "string",
            "description": "Selects the HTTP transport."
          },
          {
            "name": "NTFY_SERVERS",
            "format": "string",
            "description": "JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand."
          },
          {
            "name": "NTFY_BASE_URL",
            "format": "string",
            "default": "https://ntfy.sh",
            "description": "Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset."
          },
          {
            "name": "NTFY_DEFAULT_TOPIC",
            "format": "string",
            "description": "Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe."
          },
          {
            "name": "NTFY_AUTH_TOKEN",
            "format": "string",
            "description": "Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD."
          },
          {
            "name": "NTFY_AUTH_USERNAME",
            "format": "string",
            "description": "Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD."
          },
          {
            "name": "NTFY_AUTH_PASSWORD",
            "format": "string",
            "description": "Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME."
          },
          {
            "name": "NTFY_REQUEST_TIMEOUT_MS",
            "format": "string",
            "default": "15000",
            "description": "Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts."
          },
          {
            "name": "NTFY_MAX_RETRIES",
            "format": "string",
            "default": "3",
            "description": "Max retry attempts for transient upstream failures (5xx, network, 429)."
          },
          {
            "name": "NTFY_BLOCK_PRIVATE_HOSTS",
            "format": "string",
            "default": "false",
            "description": "When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server."
          },
          {
            "name": "NTFY_CLAMP_LIMITS",
            "format": "string",
            "default": "true",
            "description": "When true, a `limit` above a tool's per-call cap (100 for ntfy_fetch_messages, 200 for ntfy_search_emoji_tags) is served as the cap with a notice, and the input schema advertises no maximum. Set to false to advertise and enforce a schema maximum at the cap instead, so a larger value is rejected."
          },
          {
            "name": "NTFY_ENABLE_EMOJI_TAGS",
            "format": "string",
            "default": "true",
            "description": "Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it."
          },
          {
            "name": "MCP_SESSION_MODE",
            "format": "string",
            "default": "stateful",
            "description": "HTTP session model: 'auto', 'stateful', or 'stateless'. This server requires 'stateful' over HTTP — the consent prompt on destructive and outbound calls is a multi-round-trip request that a 2025-era HTTP client can only complete over a live session — so an HTTP start with 'stateless' is refused. 'auto' resolves to 'stateful'; stdio ignores the setting."
          },
          {
            "name": "MCP_HTTP_HOST",
            "format": "string",
            "default": "127.0.0.1",
            "description": "The hostname for the HTTP server."
          },
          {
            "name": "MCP_HTTP_PORT",
            "format": "string",
            "default": "3010",
            "description": "The port to run the HTTP server on."
          },
          {
            "name": "MCP_HTTP_ENDPOINT_PATH",
            "format": "string",
            "default": "/mcp",
            "description": "The endpoint path for the MCP server."
          },
          {
            "name": "MCP_AUTH_MODE",
            "format": "string",
            "default": "none",
            "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'."
          },
          {
            "name": "MCP_REQUEST_STATE_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Recommended for HTTP. Key (>= 32 bytes, the same on every instance) that seals the requestState carrying the consent-record id of a confirmation prompt, bound to the caller for 900 s; a forged, tampered, or expired state is rejected before the handler runs."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          },
          {
            "name": "LOGS_DIR",
            "format": "string",
            "default": "./logs",
            "description": "Directory for file-based logs (Node only; ignored on Workers)."
          },
          {
            "name": "OTEL_ENABLED",
            "format": "string",
            "default": "false",
            "description": "Enable OpenTelemetry instrumentation (spans, metrics, completion logs)."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/cyanheads/ntfy-mcp-server",
      "source": "github"
    },
    "description": "Send, manage, and replay ntfy push notifications via MCP."
  }
}