Zum Inhalt springen

rebar im Namensraum io.github

Lokaler Paketweg angegebenKeine Zugangsdaten angegebenRepository von der Quelle angegebenStand 2026-08-30

io.github.navapbc/rebar · Registerstatus: aktiv

Die Quelle liefert zu diesem Eintrag keinen eigenen Namen. In der Überschrift steht deshalb der hintere Teil des Bezeichners; vollständig steht er als Koordinate darunter.

Angaben zu diesem Eintrag melden

Auf einen Blick

Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.

Beschreibung des Anbieters, unübersetzt und ungeprüft

Ausführungsort
Lokaler Paketweg angegebenMCP-Register · 2026-08-06
Pflicht-Geheimnisse deklariert
Keine Zugangsdaten angegebenMCP-Register · 2026-08-06
Deklarierte Version und Änderung
0.13.1 · Änderung, von der Quelle gemeldet 2026-08-30MCP-Register · 2026-08-31
Repository laut Rohsatz
github.com/navapbc/rebarMCP-Register · 2026-08-06
Konfiguration
baubar aus der offengelegten Startvorlage

Verbindungswege und Voraussetzungen ansehen

Verwandte Kategorien

6 von 11 Kategorien. Alle Kategorien im Themenkatalog

Seite zuletzt geändert:

Quellen und Erhebung
Läuft
Lokaler Paketweg angegeben
Zugangsdaten
Keine Zugangsdaten angegeben
Im Register geändert
2026-08-30
Einrichtung
Vorlage vorhanden
Registername
io.github.navapbc/rebar
Paketkoordinate
pypi:nava-rebar
Deklarierte Version
0.13.1
Eintragung, von der Quelle gemeldet
2026-08-30
Änderung, von der Quelle gemeldet
2026-08-30
Von tracevero erstmals gesehen
2026-08-06
Homepage des Anbieters
https://github.com/navapbc/rebar

Beleg dieser Seite: Die Werte dieser Seite stammen aus mehreren Erhebungen. Jede Zeile nennt ihre Herkunft deshalb selbst. Was die Vertrauensgrade bedeuten

Gemessene Werte

Gemessene Werte
Pflicht-Geheimnisse deklariertKeine Zugangsdaten angegeben nein
Originalangabe – Geheime Pflichtvariablen (Rohangabe): nachweislich nicht vorhanden
Originalangabe – Geheime Pflichtkopfzeilen (Rohangabe): nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-06 · abgeleitet
AusführungsortLokaler Paketweg angegeben lokal
Originalangabe – Transportarten (Rohangabe): stdio
Quelle: MCP-Register · erhoben am 2026-08-06 · abgeleitet
Pfadargument vorhandennein
Originalangabe – Pfadargumente (Rohangabe): nachweislich nicht vorhanden
Originalangabe – Pfad-Umgebungsvariablen (Rohangabe): nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-06 · abgeleitet
Repository-Adresse geführtRepository von der Quelle angegeben ja
Originalangabe – Repository (Rohangabe): https://github.com/navapbc/rebar
Quelle: MCP-Register · erhoben am 2026-08-06 · abgeleitet
Einsatzgebiet, aus der Anbieterbeschreibung abgeleitetAufgabenverwaltung
Originalangabe – Beschreibung (Rohangabe): Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.
Quelle: MCP-Register · erhoben am 2026-08-26 · abgeleitet
Deklarierte Version0.13.1
Quelle: MCP-Register · erhoben am 2026-08-31 · Selbstauskunft

Gemessen ist, was ein Manifest erklärt, nicht was eine Software tut. Dieses Register ruft keine Repository-Adresse auf, keinen Endpunkt und keinen Paketindex; nichts hier ist nachgeprüft. Welche Angabe aus welcher Quelle stammt und nach welcher Regel sie gebildet ist, steht in der Methodik.

Daten der Quelle25

Beleg dieser Seite: Die Werte dieser Seite stammen aus mehreren Erhebungen. Jede Zeile nennt ihre Herkunft deshalb selbst.

Rohangaben
Beschreibung (Rohangabe)Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.
Quelle: MCP-Register · erhoben am 2026-08-31 · Selbstauskunft
Umgebungsvariablen (Rohangabe)REBAR_ROOT, REBAR_MCP_READONLY, REBAR_MCP_ALLOW_LLM, REBAR_MCP_ALLOW_JIRA_SYNC, REBAR_MCP_TRANSPORT, REBAR_MCP_HTTP_HOST, REBAR_MCP_HTTP_PORT, REBAR_MCP_HTTP_PATH, REBAR_MCP_HTTP_ALLOWED_HOSTS, REBAR_MCP_HTTP_ALLOWED_ORIGINS, REBAR_MCP_HTTP_TLS_AT_EDGE, REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP, REBAR_MCP_AUTH_ENABLED, REBAR_MCP_AUTH_STRATEGIES, REBAR_MCP_AUTH_ISSUER_URL, REBAR_MCP_AUTH_RESOURCE_SERVER_URL, REBAR_MCP_AUTH_REQUIRED_SCOPES, REBAR_MCP_AUTH_STATIC_TOKENS_FILE, REBAR_MCP_AUTH_JWT_JWKS_URI, REBAR_MCP_AUTH_JWT_ISSUER, REBAR_MCP_AUTH_JWT_ALGORITHMS, REBAR_MCP_AUTH_JWT_LEEWAY, REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN, REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT, REBAR_MCP_AUTH_JWT_EXPECTED_TYP, REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST, REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT, REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID, REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV, REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST, REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD, REBAR_MCP_AUTH_PROXY_SECRET_ENV, REBAR_MCP_AUTH_PROXY_SECRET_HEADER, REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER, REBAR_MCP_AUTH_PROXY_SCOPES, REBAR_MCP_AUTH_CUSTOM_IMPORT
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Geheime Pflichtvariablen (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Transportarten (Rohangabe)stdio
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Pfadargumente (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Repository (Rohangabe)https://github.com/navapbc/rebar
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Paketquellen (Rohangabe)pypi
Quelle: MCP-Register · erhoben am 2026-08-06 · Selbstauskunft
Geheime Pflichtkopfzeilen (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Pfad-Umgebungsvariablen (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Remote-Adressen (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Remote-Hosts (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Statusmeldung des Registers (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Im Register eingetragen am (Rohangabe)2026-08-30
Quelle: MCP-Register · erhoben am 2026-08-31 · Selbstauskunft
Im Register geändert am (Rohangabe)2026-08-30
Quelle: MCP-Register · erhoben am 2026-08-31 · Selbstauskunft
Schemafassung des Rohsatzes (Rohangabe)https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Bereitstellungsform (Rohangabe)paket
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Repository-Plattform (Rohangabe)github
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Repository-Unterordner (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Paketbezeichner (Rohangabe)nava-rebar
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Paketversionen (Rohangabe)0.13.1
Quelle: MCP-Register · erhoben am 2026-08-31 · Selbstauskunft
Laufzeithinweise (Rohangabe)uvx
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Formate der Umgebungsvariablen (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Beschreibungen der Umgebungsvariablen (Rohangabe)REBAR_MCP_ALLOW_JIRA_SYNC=Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only. · REBAR_MCP_ALLOW_LLM=Set to 1 to enable the billable LLM tools (review_code / scan_spec / verify_completion / review_plan); off by default. · REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP=Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off. · REBAR_MCP_AUTH_CUSTOM_IMPORT=The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error). · REBAR_MCP_AUTH_ENABLED=Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default. · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD=Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject). · REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST=Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID=The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic). · REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV=The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed). · REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT=The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching). · REBAR_MCP_AUTH_ISSUER_URL=OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled. · REBAR_MCP_AUTH_JWT_ALGORITHMS=Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused. · REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST=Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default. · REBAR_MCP_AUTH_JWT_EXPECTED_TYP=When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check. · REBAR_MCP_AUTH_JWT_ISSUER=Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset. · REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN=Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30). · REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT=HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10). · REBAR_MCP_AUTH_JWT_JWKS_URI=HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json). · REBAR_MCP_AUTH_JWT_LEEWAY=Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60). · REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER=The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user). · REBAR_MCP_AUTH_PROXY_SCOPES=Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes). · REBAR_MCP_AUTH_PROXY_SECRET_ENV=The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed). · REBAR_MCP_AUTH_PROXY_SECRET_HEADER=The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth). · REBAR_MCP_AUTH_REQUIRED_SCOPES=Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one. · REBAR_MCP_AUTH_RESOURCE_SERVER_URL=The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it. · REBAR_MCP_AUTH_STATIC_TOKENS_FILE=Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens). · REBAR_MCP_AUTH_STRATEGIES=Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom). · REBAR_MCP_HTTP_ALLOWED_HOSTS=Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_ALLOWED_ORIGINS=Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback. · REBAR_MCP_HTTP_HOST=Bind host for the Streamable-HTTP transport (default 127.0.0.1). · REBAR_MCP_HTTP_PATH=URL path the Streamable-HTTP transport serves on (default /mcp). · REBAR_MCP_HTTP_PORT=Bind port for the Streamable-HTTP transport (1-65535; default 8000). · REBAR_MCP_HTTP_TLS_AT_EDGE=Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host. · REBAR_MCP_READONLY=Set to 1 to expose only the read tools (no write/mutation tools). · REBAR_MCP_TRANSPORT=Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport). · REBAR_ROOT=Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Symbolformate (Rohangabe)nachweislich nicht vorhanden
Quelle: MCP-Register · erhoben am 2026-08-16 · Selbstauskunft
Verbindungswege (Quellstruktur){"packages":[{"registryType":"pypi","identifier":"nava-rebar","version":"0.13.1","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"REBAR_ROOT","description":"Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).","required":false,"secret":false},{"name":"REBAR_MCP_READONLY","description":"Set to 1 to expose only the read tools (no write/mutation tools).","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_LLM","description":"Set to 1 to enable the billable LLM tools (review_code / scan_spec / verify_completion / review_plan); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_JIRA_SYNC","description":"Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only.","required":false,"secret":false},{"name":"REBAR_MCP_TRANSPORT","description":"Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_HOST","description":"Bind host for the Streamable-HTTP transport (default 127.0.0.1).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_PORT","description":"Bind port for the Streamable-HTTP transport (1-65535; default 8000).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_PATH","description":"URL path the Streamable-HTTP transport serves on (default /mcp).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_ALLOWED_HOSTS","description":"Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_ALLOWED_ORIGINS","description":"Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_TLS_AT_EDGE","description":"Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host.","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP","description":"Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_ENABLED","description":"Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_STRATEGIES","description":"Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_ISSUER_URL","description":"OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_RESOURCE_SERVER_URL","description":"The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_REQUIRED_SCOPES","description":"Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_STATIC_TOKENS_FILE","description":"Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_URI","description":"HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ISSUER","description":"Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ALGORITHMS","description":"Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_LEEWAY","description":"Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN","description":"Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT","description":"HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_EXPECTED_TYP","description":"When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST","description":"Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT","description":"The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID","description":"The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV","description":"The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST","description":"Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD","description":"Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SECRET_ENV","description":"The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SECRET_HEADER","description":"The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER","description":"The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SCOPES","description":"Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_CUSTOM_IMPORT","description":"The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error).","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]}
Quelle: MCP-Register · erhoben am 2026-09-08 · Selbstauskunft
Abzeichen einbetten

Diese Zeile setzt das Abzeichen in eine eigene README-Datei. Es zeigt, wie viele Werte dieses Register zu dem Eintrag führt und wann es zuletzt nachgesehen hat, und es führt von dort auf diese Seite zurück.

tracevero: Zahl der gemessenen Werte und Erhebungstag zu diesem Registereintrag

[![tracevero: Zahl der gemessenen Werte und Erhebungstag zu diesem Registereintrag](https://tracevero.de/badge/mcp/io-github-navapbc-rebar.svg)](https://tracevero.de/mcp/io-github-navapbc-rebar)

Das Bild wird bei jedem Abruf neu gerechnet und nennt darum immer den heutigen Stand; die eingefügte Zeile bleibt unverändert. Es enthält keine Bewertung und keine Ampel – nur die beiden gemessenen Angaben.

Änderungen

Änderungen
2026-09-08Verbindungswege (Quellstruktur): – → {"packages":[{"registryType":"pypi","identifier":"nava-rebar","version":"0.13.1","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"REBAR_ROOT","description":"Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).","required":false,"secret":false},{"name":"REBAR_MCP_READONLY","description":"Set to 1 to expose only the read tools (no write/mutation tools).","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_LLM","description":"Set to 1 to enable the billable LLM tools (review_code / scan_spec / verify_completion / review_plan); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_JIRA_SYNC","description":"Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only.","required":false,"secret":false},{"name":"REBAR_MCP_TRANSPORT","description":"Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_HOST","description":"Bind host for the Streamable-HTTP transport (default 127.0.0.1).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_PORT","description":"Bind port for the Streamable-HTTP transport (1-65535; default 8000).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_PATH","description":"URL path the Streamable-HTTP transport serves on (default /mcp).","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_ALLOWED_HOSTS","description":"Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_ALLOWED_ORIGINS","description":"Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.","required":false,"secret":false},{"name":"REBAR_MCP_HTTP_TLS_AT_EDGE","description":"Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host.","required":false,"secret":false},{"name":"REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP","description":"Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_ENABLED","description":"Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_STRATEGIES","description":"Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_ISSUER_URL","description":"OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_RESOURCE_SERVER_URL","description":"The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_REQUIRED_SCOPES","description":"Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_STATIC_TOKENS_FILE","description":"Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_URI","description":"HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ISSUER","description":"Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ALGORITHMS","description":"Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_LEEWAY","description":"Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN","description":"Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT","description":"HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_EXPECTED_TYP","description":"When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST","description":"Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT","description":"The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID","description":"The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV","description":"The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST","description":"Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default.","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD","description":"Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SECRET_ENV","description":"The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SECRET_HEADER","description":"The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER","description":"The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_PROXY_SCOPES","description":"Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes).","required":false,"secret":false},{"name":"REBAR_MCP_AUTH_CUSTOM_IMPORT","description":"The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error).","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]}
2026-08-31Deklarierte Version: 0.12.0 → 0.13.1
2026-08-31Beschreibung (Rohangabe): Event-sourced ticket system with a Jira reconciler, exposed as an MCP server. → Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.

Hier stehen die 3 jüngsten Änderungen dieses Eintrags. Vollständiger Verlauf

tracevero · https://tracevero.de/mcp/io-github-navapbc-rebar