Symfony Agent MCP

Package (npm 1.0.2)

npx -y @shakaran/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "symfony-agent-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shakaran/[email protected]"
      ],
      "env": {
        "SYMFONY_MCP_DYNAMIC_TOOLS": "<YOUR_VALUE>",
        "SYMFONY_MCP_TOKEN_BUDGET": "<YOUR_VALUE>",
        "SYMFONY_MCP_ALLOWED_PATHS": "<YOUR_VALUE>",
        "SYMFONY_MCP_SESSION_SECRET": "<YOUR_VALUE>",
        "SYMFONY_MCP_SESSION_TOKEN": "<YOUR_VALUE>",
        "SYMFONY_MCP_AUDIT": "<YOUR_VALUE>",
        "SYMFONY_MCP_DLP": "<YOUR_VALUE>"
      }
    }
  }
}

• SYMFONY_MCP_DYNAMIC_TOOLS — Progressive tool discovery. Left on, tools/list advertises five discovery meta-tools and the rest become callable once a category is activated (~828 tokens on connect). Set to false to advertise all 1,677 up front (~154,000).
• SYMFONY_MCP_TOKEN_BUDGET — Token ceiling for the schemas a session may have active at once.
• SYMFONY_MCP_ALLOWED_PATHS — Colon-separated allowlist of directories the server may read. Any app_path outside them is refused.
• SYMFONY_MCP_SESSION_SECRET secret — Enables session-token authentication. Unset, authentication is off.
• SYMFONY_MCP_SESSION_TOKEN secret — Client-side token, required only once SYMFONY_MCP_SESSION_SECRET is set.
• SYMFONY_MCP_AUDIT — Encrypted audit log of every tool call.
• SYMFONY_MCP_DLP — Scan every result for credentials before returning it. Turning this off is reported as CRITICAL by the startup audit.