ntfy-mcp-server

Package (npm 2.4.0)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "ntfy-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

• NTFY_SERVERS — JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand.
• NTFY_BASE_URL — Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset.
• NTFY_DEFAULT_TOPIC — Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe.
• NTFY_AUTH_TOKEN — Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD.
• NTFY_AUTH_USERNAME — Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD.
• NTFY_AUTH_PASSWORD — Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME.
• NTFY_REQUEST_TIMEOUT_MS — Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts.
• NTFY_MAX_RETRIES — Max retry attempts for transient upstream failures (5xx, network, 429).
• NTFY_BLOCK_PRIVATE_HOSTS — When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server.
• NTFY_ENABLE_EMOJI_TAGS — Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it.
• MCP_LOG_LEVEL — Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').
• LOGS_DIR — Directory for file-based logs (Node only; ignored on Workers).
• OTEL_ENABLED — Enable OpenTelemetry instrumentation (spans, metrics, completion logs).

Package (npm 2.4.0)

Package: npm ntfy-mcp-server

• MCP_TRANSPORT_TYPE — Selects the HTTP transport.
• NTFY_SERVERS — JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand.
• NTFY_BASE_URL — Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset.
• NTFY_DEFAULT_TOPIC — Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe.
• NTFY_AUTH_TOKEN — Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD.
• NTFY_AUTH_USERNAME — Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD.
• NTFY_AUTH_PASSWORD — Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME.
• NTFY_REQUEST_TIMEOUT_MS — Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts.
• NTFY_MAX_RETRIES — Max retry attempts for transient upstream failures (5xx, network, 429).
• NTFY_BLOCK_PRIVATE_HOSTS — When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server.
• NTFY_ENABLE_EMOJI_TAGS — Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it.
• MCP_SESSION_MODE — HTTP session model: 'auto', 'stateful', or 'stateless'. This server requires 'stateful' over HTTP — the consent prompt on destructive and outbound calls is a multi-round-trip request that a 2025-era HTTP client can only complete over a live session — so an HTTP start with 'stateless' is refused. 'auto' resolves to 'stateful'; stdio ignores the setting.
• MCP_HTTP_HOST — The hostname for the HTTP server.
• MCP_HTTP_PORT — The port to run the HTTP server on.
• MCP_HTTP_ENDPOINT_PATH — The endpoint path for the MCP server.
• MCP_AUTH_MODE — Authentication mode to use: 'none', 'jwt', or 'oauth'.
• MCP_REQUEST_STATE_KEY secret — Recommended for HTTP. Key (>= 32 bytes, the same on every instance) that seals the requestState carrying the consent-record id of a confirmation prompt, bound to the caller for 900 s; a forged, tampered, or expired state is rejected before the handler runs.
• MCP_LOG_LEVEL — Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').
• LOGS_DIR — Directory for file-based logs (Node only; ignored on Workers).
• OTEL_ENABLED — Enable OpenTelemetry instrumentation (spans, metrics, completion logs).