{"name":"io.github.cyanheads/ntfy-mcp-server","slug":"cyanheads-ntfy-mcp-server","title":null,"description":"Send, manage, and replay ntfy push notifications via MCP.","url":"https://mcp.market/server/cyanheads-ntfy-mcp-server","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":45,"stars":23,"forks":10,"downloads_week":2114,"last_push_at":"2026-10-15T03:30:10.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/cyanheads/ntfy-mcp-server","website":null,"version":"2.4.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"ntfy-mcp-server","version":"2.4.0","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand.","format":"string","name":"NTFY_SERVERS"},{"description":"Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset.","format":"string","default":"https://ntfy.sh","name":"NTFY_BASE_URL"},{"description":"Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe.","format":"string","name":"NTFY_DEFAULT_TOPIC"},{"description":"Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD.","format":"string","name":"NTFY_AUTH_TOKEN"},{"description":"Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD.","format":"string","name":"NTFY_AUTH_USERNAME"},{"description":"Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME.","format":"string","name":"NTFY_AUTH_PASSWORD"},{"description":"Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts.","format":"string","default":"15000","name":"NTFY_REQUEST_TIMEOUT_MS"},{"description":"Max retry attempts for transient upstream failures (5xx, network, 429).","format":"string","default":"3","name":"NTFY_MAX_RETRIES"},{"description":"When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server.","format":"string","default":"false","name":"NTFY_BLOCK_PRIVATE_HOSTS"},{"description":"Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it.","format":"string","default":"true","name":"NTFY_ENABLE_EMOJI_TAGS"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"},{"description":"Directory for file-based logs (Node only; ignored on Workers).","format":"string","default":"./logs","name":"LOGS_DIR"},{"description":"Enable OpenTelemetry instrumentation (spans, metrics, completion logs).","format":"string","default":"false","name":"OTEL_ENABLED"}]},{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"ntfy-mcp-server","version":"2.4.0","runtimeHint":"npx","transport":{"type":"streamable-http","url":"http://127.0.0.1:3010/mcp"},"environmentVariables":[{"description":"Selects the HTTP transport.","format":"string","value":"http","name":"MCP_TRANSPORT_TYPE"},{"description":"JSON array of `{ baseUrl, authToken? | authUsername?+authPassword? }` entries — one per ntfy server. First entry is the default base. Auth is scoped to the entry's `baseUrl`; per-call `base_url` overrides that match a registered base forward that server's auth. Takes precedence over the single-server NTFY_BASE_URL / NTFY_AUTH_* shorthand.","format":"string","name":"NTFY_SERVERS"},{"description":"Single-server shorthand — base URL of the ntfy server (no trailing slash). Used when NTFY_SERVERS is unset.","format":"string","default":"https://ntfy.sh","name":"NTFY_BASE_URL"},{"description":"Topic used when a tool call omits `topic`. Treat the topic name as a secret — anyone who knows it can publish or subscribe.","format":"string","name":"NTFY_DEFAULT_TOPIC"},{"description":"Bearer access token (`tk_…`) for the single-server shorthand. Mutually exclusive with NTFY_AUTH_USERNAME / NTFY_AUTH_PASSWORD.","format":"string","name":"NTFY_AUTH_TOKEN"},{"description":"Basic-auth username for the single-server shorthand — must be set together with NTFY_AUTH_PASSWORD.","format":"string","name":"NTFY_AUTH_USERNAME"},{"description":"Basic-auth password for the single-server shorthand — must be set together with NTFY_AUTH_USERNAME.","format":"string","name":"NTFY_AUTH_PASSWORD"},{"description":"Per-attempt HTTP timeout in milliseconds, covering the response body. Each call is also capped at 50 s across all attempts.","format":"string","default":"15000","name":"NTFY_REQUEST_TIMEOUT_MS"},{"description":"Max retry attempts for transient upstream failures (5xx, network, 429).","format":"string","default":"3","name":"NTFY_MAX_RETRIES"},{"description":"When true, a per-call `base_url` override must resolve to a public address and its redirects are not followed. Servers registered under NTFY_SERVERS / NTFY_BASE_URL are exempt. Turn it on where callers you do not control can reach the server.","format":"string","default":"false","name":"NTFY_BLOCK_PRIVATE_HOSTS"},{"description":"Set to false to disable the ntfy_search_emoji_tags tool: it leaves tools/list, and the server instructions and ntfy_publish_message stop pointing at it.","format":"string","default":"true","name":"NTFY_ENABLE_EMOJI_TAGS"},{"description":"HTTP session model: 'auto', 'stateful', or 'stateless'. This server requires 'stateful' over HTTP — the consent prompt on destructive and outbound calls is a multi-round-trip request that a 2025-era HTTP client can only complete over a live session — so an HTTP start with 'stateless' is refused. 'auto' resolves to 'stateful'; stdio ignores the setting.","format":"string","default":"stateful","name":"MCP_SESSION_MODE"},{"description":"The hostname for the HTTP server.","format":"string","default":"127.0.0.1","name":"MCP_HTTP_HOST"},{"description":"The port to run the HTTP server on.","format":"string","default":"3010","name":"MCP_HTTP_PORT"},{"description":"The endpoint path for the MCP server.","format":"string","default":"/mcp","name":"MCP_HTTP_ENDPOINT_PATH"},{"description":"Authentication mode to use: 'none', 'jwt', or 'oauth'.","format":"string","default":"none","name":"MCP_AUTH_MODE"},{"description":"Recommended for HTTP. Key (>= 32 bytes, the same on every instance) that seals the requestState carrying the consent-record id of a confirmation prompt, bound to the caller for 900 s; a forged, tampered, or expired state is rejected before the handler runs.","format":"string","isSecret":true,"name":"MCP_REQUEST_STATE_KEY"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"},{"description":"Directory for file-based logs (Node only; ignored on Workers).","format":"string","default":"./logs","name":"LOGS_DIR"},{"description":"Enable OpenTelemetry instrumentation (spans, metrics, completion logs).","format":"string","default":"false","name":"OTEL_ENABLED"}]}],"tools":[],"scan":null,"grade_history":[{"kind":"downgrade","fromGrade":"A","toGrade":"B","reason":"score 83","createdAt":"2026-10-15T11:59:30.413Z"},{"kind":"restore","fromGrade":"B","toGrade":"A","reason":"score 92","createdAt":"2026-09-19T21:08:06.272Z"}],"reviews":[]}