MediaWiki MCP Server

Package (mcpb)

Package: mcpb https://github.com/ProfessionalWiki/MediaWiki-MCP-Server/releases/download/v0.18.0/MediaWiki-MCP-Server.mcpb

• CONFIG — Path to your configuration file
• MCP_ALLOW_STATIC_FALLBACK — Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests.
• MCP_CONTENT_MAX_BYTES — Byte cap for the content bodies and result blocks tools return (wikitext, rendered HTML, diffs, statement and row listings). An oversized response is truncated with a trailing marker describing what was left out.
• MCP_FILE_DATA_MAX_BYTES — Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate.
• MCP_LOG_LEVEL — Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call.
• MCP_MAX_REQUEST_BODY — Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb.
• MCP_METRICS — Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport.
• MCP_OAUTH_ALLOWED_REDIRECTS — Additional allowed redirect URIs for hosted-proxy client registration: comma-separated exact URIs (which must include a host) and https prefix patterns ending in /*. Loopback, claude.ai, and verified first-party clients (ChatGPT, Cursor, VS Code) are always allowed; unset means no additional clients.
• MCP_OAUTH_CIMD_ALLOWED_HOSTS — Comma-separated additional client_id document hosts trusted for CIMD (bare host or host:port). Verified first-party hosts are always trusted.
• MCP_OAUTH_CREDENTIALS_FILE — Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows.
• MCP_OAUTH_NO_BROWSER — Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI.
• MCP_OAUTH_PROXY_STORE_FILE — Path to the hosted OAuth proxy's encrypted state file, which lets sign-ins survive restarts. Default: proxy-store.enc under the mediawiki-mcp config dir; /app/data/proxy-store.enc in the Docker image.
• MCP_PUBLIC_URL — Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host.
• MCP_SHUTDOWN_GRACE_MS — Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000.
• MCP_TRANSPORT — Type of MCP server transport
• MCP_UPLOAD_MAX_BYTES — Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize.
• PORT — Port used for StreamableHTTP transport

Package (npm 0.18.0)

npx -y @professional-wiki/mediawiki-mcp-server@0.18.0

Or add to your MCP client config:

{
  "mcpServers": {
    "mediawiki-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@professional-wiki/mediawiki-mcp-server@0.18.0"
      ],
      "env": {
        "CONFIG": "<YOUR_VALUE>",
        "MCP_ALLOW_STATIC_FALLBACK": "<YOUR_VALUE>",
        "MCP_CONTENT_MAX_BYTES": "<YOUR_VALUE>",
        "MCP_FILE_DATA_MAX_BYTES": "<YOUR_VALUE>",
        "MCP_LOG_LEVEL": "<YOUR_VALUE>",
        "MCP_MAX_REQUEST_BODY": "<YOUR_VALUE>",
        "MCP_METRICS": "<YOUR_VALUE>",
        "MCP_OAUTH_ALLOWED_REDIRECTS": "<YOUR_VALUE>",
        "MCP_OAUTH_CIMD_ALLOWED_HOSTS": "<YOUR_VALUE>",
        "MCP_OAUTH_CREDENTIALS_FILE": "<YOUR_VALUE>",
        "MCP_OAUTH_NO_BROWSER": "<YOUR_VALUE>",
        "MCP_OAUTH_PROXY_STORE_FILE": "<YOUR_VALUE>",
        "MCP_PUBLIC_URL": "<YOUR_VALUE>",
        "MCP_SHUTDOWN_GRACE_MS": "<YOUR_VALUE>",
        "MCP_TRANSPORT": "<YOUR_VALUE>",
        "MCP_UPLOAD_MAX_BYTES": "<YOUR_VALUE>",
        "PORT": "<YOUR_VALUE>"
      }
    }
  }
}

• CONFIG — Path to your configuration file
• MCP_ALLOW_STATIC_FALLBACK — Set to 'true' to allow HTTP startup when config.json has static credentials. Otherwise the server refuses to start, preventing silent shared-identity fallback for unauthenticated requests.
• MCP_CONTENT_MAX_BYTES — Byte cap for the content bodies and result blocks tools return (wikitext, rendered HTML, diffs, statement and row listings). An oversized response is truncated with a trailing marker describing what was left out.
• MCP_FILE_DATA_MAX_BYTES — Hard cap on the base64-encoded size of a get-file-data response. A transport/safety backstop; callers tune actual size with the tool's width parameter. Over-cap responses error rather than truncate.
• MCP_LOG_LEVEL — Minimum severity for logger output (stderr telemetry and sendLoggingMessage broadcast). Invalid values fail loudly on first log call.
• MCP_MAX_REQUEST_BODY — Maximum HTTP request body size on the StreamableHTTP transport. Accepts size strings like 1mb or 512kb.
• MCP_METRICS — Set to 'true' to expose Prometheus metrics at GET /metrics on the HTTP transport. Has no effect on the stdio transport.
• MCP_OAUTH_ALLOWED_REDIRECTS — Additional allowed redirect URIs for hosted-proxy client registration: comma-separated exact URIs (which must include a host) and https prefix patterns ending in /*. Loopback, claude.ai, and verified first-party clients (ChatGPT, Cursor, VS Code) are always allowed; unset means no additional clients.
• MCP_OAUTH_CIMD_ALLOWED_HOSTS — Comma-separated additional client_id document hosts trusted for CIMD (bare host or host:port). Verified first-party hosts are always trusted.
• MCP_OAUTH_CREDENTIALS_FILE — Override the default OAuth credentials store path. Default: ~/.config/mediawiki-mcp/credentials.json on Linux/macOS, %APPDATA%\mediawiki-mcp\credentials.json on Windows.
• MCP_OAUTH_NO_BROWSER — Set to '1' to skip launching a browser during the OAuth dance and log the auth URL to stderr instead. Useful in headless environments and CI.
• MCP_OAUTH_PROXY_STORE_FILE — Path to the hosted OAuth proxy's encrypted state file, which lets sign-ins survive restarts. Default: proxy-store.enc under the mediawiki-mcp config dir; /app/data/proxy-store.enc in the Docker image.
• MCP_PUBLIC_URL — Override the request-derived public URL used in the protected-resource discovery doc and WWW-Authenticate header. Set this when running behind a proxy that rewrites the request Host.
• MCP_SHUTDOWN_GRACE_MS — Maximum milliseconds to wait for in-flight /mcp calls to drain on SIGTERM/SIGINT before exiting. Capped at 600000.
• MCP_TRANSPORT — Type of MCP server transport
• MCP_UPLOAD_MAX_BYTES — Memory cap on the server-side fetch used by upload-file-from-url and update-file-from-url. Files larger than this are routed to the wiki's own copy-upload instead of being buffered by the server. Guards this server's memory, not the wiki's $wgMaxUploadSize.
• PORT — Port used for StreamableHTTP transport