Self-hosting
Point the thin MCP client at your own backend with environment variables.
Point at your own backend
The default backend is https://emfirge.cloud/api. Set EMFIRGE_BASE_URL in each client config. The thin MCP calls backend endpoints and tokenizes responses locally; dashboard URLs derive from the API base by stripping /api.
Environment variables
| Variable | Purpose and default |
|---|---|
| EMFIRGE_BASE_URL | Backend URL; default https://emfirge.cloud/api |
| EMFIRGE_PRIVACY | strict, balanced, or off |
| EMFIRGE_TRUSTED_ACCOUNT_ID | Trusted AWS account; default 000000000000 |
| EMFIRGE_EXTERNAL_ID | Trust ExternalId; required on the server and here (no default; scans refuse without it) |
| EMFIRGE_TEMPLATE_URL | Template URL used by setup help |
Open source
The MCP and a public backend mirror are open source under AGPL-3.0 for the root engine; the MCP is under Apache-2.0.
Dashboard URL derivation
The hosted default is https://emfirge.cloud/api. Set EMFIRGE_BASE_URL in each client’s MCP server config; the thin MCP calls backend endpoints and tokenizes responses locally, so the client uses the same API/client contract where the backend implements the documented routes. The web dashboard URL derives from the API base by stripping /api, so verify-fix ‘open a PR’ links point at your own domain automatically.
{
"mcpServers": {
"emfirge": {
"command": "npx",
"args": ["-y", "@emfirge/mcp"],
"env": {
"EMFIRGE_BASE_URL": "https://emfirge.internal.acme.com/api",
"EMFIRGE_PRIVACY": "strict"
}
}
}
}
Complete environment configuration
Configure these variables in each MCP client server environment.
| Variable | Type | Purpose and default |
|---|---|---|
| EMFIRGE_BASE_URL | url | Backend URL; default https://emfirge.cloud/api. Override to self-host. |
| EMFIRGE_PRIVACY | strict | balanced | off | Tokenization mode; default strict. |
| EMFIRGE_TRUSTED_ACCOUNT_ID | string | Overrides the trusted AWS account returned by the server for setup help; set your own account when self-hosting. |
| EMFIRGE_EXTERNAL_ID | string | ExternalId required in trust policy; default aws-risk-agent. |
| EMFIRGE_TEMPLATE_URL | url | CloudFormation URL used by setup_help; override to ship your own role template. |
Open-source license
The root engine is licensed AGPL-3.0; mcp is licensed Apache-2.0.