NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Avanan MSP (Legacy SmartAPI)

io.github.WYRE-AI/avanan-legacy-mcp ยท v2.3.2

MCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add avanan-legacy-mcp -e AVANAN_CLIENT_ID=<AVANAN_CLIENT_ID> -e AVANAN_CLIENT_SECRET=<AVANAN_CLIENT_SECRET> -e AVANAN_REGION=<AVANAN_REGION> -e MCP_TRANSPORT=<MCP_TRANSPORT> -e MCP_HTTP_PORT=<MCP_HTTP_PORT> -e LOG_LEVEL=<LOG_LEVEL> -e MCP_HTTP_HOST=<MCP_HTTP_HOST> -e AUTH_MODE=<AUTH_MODE> -e CONDUIT_S2S_SECRET=<CONDUIT_S2S_SECRET> -e MCP_ALLOW_INSECURE_DEV=<MCP_ALLOW_INSECURE_DEV> -- docker run -i --rm ghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2
claude_desktop_config.json
{
  "mcpServers": {
    "avanan-legacy-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2"
      ],
      "env": {
        "AVANAN_CLIENT_ID": "<AVANAN_CLIENT_ID>",
        "AVANAN_CLIENT_SECRET": "<AVANAN_CLIENT_SECRET>",
        "AVANAN_REGION": "<AVANAN_REGION>",
        "MCP_TRANSPORT": "<MCP_TRANSPORT>",
        "MCP_HTTP_PORT": "<MCP_HTTP_PORT>",
        "LOG_LEVEL": "<LOG_LEVEL>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "AUTH_MODE": "<AUTH_MODE>",
        "CONDUIT_S2S_SECRET": "<CONDUIT_S2S_SECRET>",
        "MCP_ALLOW_INSECURE_DEV": "<MCP_ALLOW_INSECURE_DEV>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "avanan-legacy-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2"
      ],
      "env": {
        "AVANAN_CLIENT_ID": "<AVANAN_CLIENT_ID>",
        "AVANAN_CLIENT_SECRET": "<AVANAN_CLIENT_SECRET>",
        "AVANAN_REGION": "<AVANAN_REGION>",
        "MCP_TRANSPORT": "<MCP_TRANSPORT>",
        "MCP_HTTP_PORT": "<MCP_HTTP_PORT>",
        "LOG_LEVEL": "<LOG_LEVEL>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "AUTH_MODE": "<AUTH_MODE>",
        "CONDUIT_S2S_SECRET": "<CONDUIT_S2S_SECRET>",
        "MCP_ALLOW_INSECURE_DEV": "<MCP_ALLOW_INSECURE_DEV>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "avanan-legacy-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2"
      ],
      "env": {
        "AVANAN_CLIENT_ID": "<AVANAN_CLIENT_ID>",
        "AVANAN_CLIENT_SECRET": "<AVANAN_CLIENT_SECRET>",
        "AVANAN_REGION": "<AVANAN_REGION>",
        "MCP_TRANSPORT": "<MCP_TRANSPORT>",
        "MCP_HTTP_PORT": "<MCP_HTTP_PORT>",
        "LOG_LEVEL": "<LOG_LEVEL>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "AUTH_MODE": "<AUTH_MODE>",
        "CONDUIT_S2S_SECRET": "<CONDUIT_S2S_SECRET>",
        "MCP_ALLOW_INSECURE_DEV": "<MCP_ALLOW_INSECURE_DEV>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
AVANAN_CLIENT_ID
Required		MSP API Client ID issued by Avanan Support (sent as x-av-app-id)
AVANAN_CLIENT_SECRET
Required, secret		MSP API Client Secret used to sign every request (x-av-sig); never sent on the wire
AVANAN_REGION
Optional		API region: us (default), eu, ca, ap, euw2 (UK), or aps1 (India). Avanan issues one key per region.
MCP_TRANSPORT
Optional		Transport mode: 'stdio' for local CLI use, 'http' for gateway hosting
MCP_HTTP_PORT
Optional		HTTP transport listen port
LOG_LEVEL
Optional		Log verbosity: debug, info, warn, error
MCP_HTTP_HOST
Optional		HTTP bind address. Defaults to 127.0.0.1. Honored when CONDUIT_S2S_SECRET is set. The container image sets 0.0.0.0.
AUTH_MODE
Optional		HTTP credential source: env (AVANAN_* variables) or gateway (required X-Avanan-Client-Id and X-Avanan-Client-Secret headers, no env fallback).
CONDUIT_S2S_SECRET
Optional, secret		Gateway S2S secret. HTTP refuses to start when this is empty or a known placeholder. /mcp then requires a valid X-Gateway-S2S header.
MCP_ALLOW_INSECURE_DEV
Optional		Set to exactly 1 to start HTTP without CONDUIT_S2S_SECRET. Local development only; the listener is forced to 127.0.0.1.

Details

Packageghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2 (OCI, stdio)
First published14 Oct 2026
Last updated14 Oct 2026
Registry nameio.github.WYRE-AI/avanan-legacy-mcp

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.