← Back to directory
V

Varlock Docs MCP Server

Official
Official documentation MCP server for Varlock, available over HTTP/SSE
Category
Dev Tools #370 of 438
Stars
★ 4.7k Very popular
Transport
SSE · Streamable HTTP
Runtime
Hosted (no local runtime)
Credentials
No credential needed
License
MIT
Last commit
38FMRS · D

This is Varlock's own officially hosted documentation-retrieval MCP server, offered over HTTP and SSE remote endpoints, suited for developers who want an AI assistant to accurately answer questions about Varlock usage — but the README provides no specific tool list or config example, and it does not touch local files or secrets.

Strongest · Maintenance 13/20 Weakest · Reliability 4/20

Reliability
4/20
Security and permissions
8/20
Maintenance
13/20
Documentation
7/20
Setup experience
6/20
Why each score
Reliability 4/20
No server manifest, tool definitions, initialization flow, or tests are provided. The README only claims that HTTP and SSE documentation servers exist, so MCP handshake, tool listing, and real behavior cannot be verified; the score is therefore low.
Security and permissions 8/20
The README presents clear security goals around AI-safe configuration, secret separation, scanning, and log redaction. However, it provides no authentication method, permission scope, data-flow disclosure, network boundary, or confirmation mechanism for dangerous operations for this MCP server, so points are deducted. No explicit red-line risk is evidenced in the supplied material.
Maintenance 13/20
The repository is not archived, uses the MIT license, and has substantial public adoption and an issue tracker, which supports some evidence of ongoing stewardship. However, there is no supplied evidence of recent releases, commit activity, dependency updates, maintainer response, or a security-response channel, so the score cannot be near full marks.
Documentation 7/20
The README covers product purpose, installation options, CLI workflow, plugins, and two MCP endpoints. It does not document MCP tool parameters, authentication, limits, cost, error behavior, or troubleshooting, and the linked installation pages are not included in the evidence, so documentation is limited.
Setup experience 6/20
HTTP and SSE endpoint URLs and links to installation documentation are supplied, providing a possible connection entry point. Mainstream client configuration examples, runtime requirements, authentication steps, and end-to-end connection evidence are missing, so setup receives a low score.

Static review · not runListed 2026-08-26

Read the FMRS scoring method →

Fit and risk

What it can accessUses the network

Best for

  • Developers already using Varlock to manage .env files who want their AI assistant to reference official documentation
  • Teams needing details on @env-spec syntax, CLI commands, or plugin configuration

Not for

  • Users who want to read or modify local .env file contents directly via MCP (not covered by this server — use the varlock CLI itself)
  • Scenarios requiring access to secret values or runtime environment variables (this server is documentation-only and does not handle secret data)

Required permissions

  • As a remote, read-only documentation service, clients typically only need outbound HTTPS network access to reach the endpoint
  • No local filesystem or environment variable access is required (none is mentioned in the README)

Risks and side effects

  • This is a remote service hosted at docs.mcp.varlock.dev, so its availability and data freshness depend on dmno-dev's operation rather than being locally controlled
  • The README does not state whether authentication or rate limiting is in place; review terms and privacy practices before connecting
  • If documentation lags behind code changes, the AI assistant could give outdated guidance

Setup

Before you start

Runtime:Hosted (no local runtime)

The README only provides the two deployed MCP endpoint URLs (HTTP: https://docs.mcp.varlock.dev/mcp, SSE: https://docs.mcp.varlock.dev/sse) and points to https://varlock.dev/guides/mcp/docs-mcp/ for the full installation guide; that guide's content is not part of the supplied source material, so no reliable step-by-step instructions can be given here. Generally, clients that support remote MCP servers need the corresponding URL and transport (streamable-http or sse) added to their MCP configuration.

Check that it works

Add https://docs.mcp.varlock.dev/mcp (or the SSE endpoint https://docs.mcp.varlock.dev/sse) as a remote MCP server in your client; after connecting, the Varlock Docs server tools should appear in the client's tool list, and asking a varlock usage question should return documentation content.

Troubleshooting

  1. Confirm the client supports the chosen transport (the HTTP endpoint corresponds to streamable-http, the other to sse)
  2. Check network connectivity to https://docs.mcp.varlock.dev
  3. If the connection fails, consult the official setup guide at https://varlock.dev/guides/mcp/docs-mcp/ for the current configuration format

Things to try

Once connected, you can ask your AI assistant things like:

  • How do I mark a variable as sensitive in a varlock .env.schema file?
  • How do I use varlock scan to find leaked secrets in committed code?
  • Show how the varlock 1Password plugin loads a database password via secret reference.
  • What is the difference between varlock load and varlock run?

Use cases

Letting an AI coding assistant consult Varlock's official docs when answering questions, instead of relying on potentially stale training data
Retrieving @env-spec syntax and decorator documentation in real time while writing or debugging .env.schema files
Supporting developers integrating Varlock plugins (1Password, Infisical, AWS Secrets, etc.) with documentation lookups

Overview

Varlock is an "AI-safe" .env file manager: it uses a .env.schema as the single source of truth, giving variables types, validation, multi-environment loading, and secure secret retrieval via plugins (1Password, Infisical, AWS, Azure, GCP, HCP Vault, and more), alongside proactive leak scanning (varlock scan) and runtime log redaction. The repository's README lists, under "MCP Servers," two officially hosted documentation MCP servers maintained by dmno-dev (Varlock's own developers): Varlock Docs (HTTP) at https://docs.mcp.varlock.dev/mcp, and Varlock Docs (SSE) at https://docs.mcp.varlock.dev/sse. These let MCP-capable AI clients retrieve Varlock's documentation to answer questions about .env.schema syntax, CLI commands, and plugin configuration more accurately. The README does not enumerate specific tools exposed by the server or provide a client config JSON example; full setup instructions are linked to https://varlock.dev/guides/mcp/docs-mcp/, which is not included in the provided source material.

Similar servers

Context7 80 · B

Upstash's official server providing up-to-date third-party library docs for AI coding assistants

★ 62.9k · Tools 2 Compare with this →

Source revision 340b0f4b0ac7 Data synced 2026-10-12 Read the FMRS scoring method