Portkey Admin은(는) 어떻게 설치하나요?

이 페이지에서 Cursor, Claude Desktop, Claude Code 또는 VS Code용 stdio 설정을 복사합니다. PlugMCP 프록시가 아니라 게시자의 설치 방식을 사용합니다.

Portkey Admin에 API 키가 필요한가요?

이 레코드에는 필수 환경 변수가 등록되어 있지 않습니다.

Portkey Admin은(는) 어떤 전송 방식을 사용하나요?

Portkey Admin은(는) stdio를 통해 로컬에서 실행됩니다.

Portkey Admin은(는) 마지막으로 언제 확인되었나요?

마지막 확인: 2026-11-14. Portkey Admin API control-plane MCP server with Prisma AIRS interoperability guidance

Portkey Admin MCP 서버

에이전트 강화

이 서버 추가

게시자의 자체 명령입니다. PlugMCP 엔드포인트가 아닙니다.

Cursor에 추가 VS Code에 추가 PlugMCP에서 실행

Host a copy with our keys and logs.

로컬 명령

npx -y [email protected]

Claude Code에는 로컬 명령용 설치 링크가 없습니다. 아래 명령을 복사해 터미널에서 실행합니다.

shClaude Code

1claude mcp add portkey-admin-mcp -- npx -y portkey-admin-mcp@0.16.4

터미널에서 실행합니다.

jsonClaude Desktop

1{2  "mcpServers": {3    "portkey-admin-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ]9    }10  }11}

claude_desktop_config.json

로컬 · npm게시자 설치단계별 안내: Claude에 추가

원격 URL인가요, 내 컴퓨터에서 실행하는 명령인가요? 두 설치 방식의 차이

PlugMCP에서 실행

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

실행

서버 정보

로컬

전송 방식: stdio
버전: 0.16.4
마지막 확인

게시자 제공

문서

The Portkey Admin API as an MCP server — 194 tools across prompts, configs, keys, analytics, governance, deployments, and more.

[!IMPORTANT] Active compatibility development. Palo Alto Networks completed its Portkey acquisition on 2026‑05‑29 and now presents Portkey as the core of Prisma AIRS AI Gateway. The Portkey Admin API remains live, and its official OpenAPI and product changelog continued adding control-plane surfaces through October 2026; this project has therefore resumed API-coverage work. It targets the Portkey-compatible API (), not Prisma AIRS/Strata Cloud Manager directly. Palo Alto now publishes a Prisma AIRS management specification, but it uses different authentication, multiple management bases, and a smaller domain set, so it is not a swap. See the short for the supported side-by-side model and adapter criteria.

Resource	Link
Tool reference	ENDPOINTS.md
Compatibility and deprecations	COMPATIBILITY.md
Changelog	CHANGELOG.md
Roadmap	ROADMAP.md
Architecture	Architecture
Deployment	HTTP configuration, Vercel guide
Distribution	Directories and release records, verify a release
Prisma AIRS	Interoperability guide
Contributing and governance	CONTRIBUTING.md, GOVERNANCE.md, Code of Conduct
Security	Reporting policy, assurance case

Category	Tools	Examples
Prompts	14	Create, version, render, execute, migrate, promote prompts
Prompt Partials	7	Reusable prompt fragments with versioning
Prompt Labels	5	Organize prompt versions (production, staging, dev)
Configs	6	Gateway routing, caching, retry, loadbalancing
Deployments	5	Register, inspect, update, and archive self-hosted Gateways
API Keys	6	Create, rotate, and manage scoped API keys
Secret References	5	Manage AWS, Azure, and HashiCorp external-secret references
Virtual Keys	5	Manage provider access keys
Collections	5	Group prompts by app or project
Providers	5	Manage AI provider configurations
Integrations	11	Provider integrations, model pricing, models, workspace access
MCP Integrations	10	External MCP tool integrations
MCP Servers	12	MCP server registry, capabilities, and live connections
Guardrails	14	LLM and MCP-tool policies, server mappings, organisation defaults, workspace exclusions
Access Policies	5	Allow/deny users, groups, and agents access to MCP tools and provider models
Egress Allowlist	5	Organisation trust for custom outbound hosts
Usage Limits	7	Cost and token consumption limits
Rate Limits	5	Request frequency controls
Analytics	25	Cost, latency, errors, tokens, cache, feedback, provider, MCP, A2A, and workspace groups; organisation scope and workspace exclusions
Logging	10	Log retrieval, ingestion, export, and field restrictions
Tracing	2	Feedback creation and updates on traces
Users & Workspaces	24	User management, invites, workspace members, SCIM group mappings
Audit	1	Audit log access

Area	Tools	Required scope
Analytics (25)	`get_cost_analytics`, `get_request_analytics`, `get_token_analytics`, `get_latency_analytics`, `get_error_analytics`, `get_error_rate_analytics`, `get_cache_hit_latency`, `get_cache_hit_rate`, `get_cache_summary`, `get_users_analytics`, `get_error_stacks_analytics`, `get_error_status_codes_analytics`, `get_user_requests_analytics`, `get_rescued_requests_analytics`, `get_feedback_analytics`, `get_feedback_models_analytics`, `get_feedback_scores_analytics`, `get_feedback_weighted_analytics`, `get_analytics_group_users`, `get_analytics_group_models`, `get_analytics_group_metadata`, `get_analytics_group_providers`, `get_analytics_group_mcp`, `get_analytics_group_a2a`, `get_analytics_group_workspaces`	org-level `analytics.view`
Deployments (5)	`list_deployments`, `register_deployment`, `get_deployment`, `update_deployment`, `archive_deployment`	Enterprise deployment administration
Audit	`list_audit_logs`	`audit_logs.list`
Org-level integrations	`get_integration`, `list_integration_models`, `list_integration_workspaces`	`organisation_integrations.read`
Org-level users	`list_all_users`, `get_user`, `get_user_stats`, `list_user_invites`	`organisation_users.list` / `organisation_users.read`
Organisation guardrails (6)	`get_organisation_defaults`, `update_organisation_defaults`, `list_input_guardrail_workspace_exclusions`, `update_input_guardrail_workspace_exclusions`, `list_output_guardrail_workspace_exclusions`, `update_output_guardrail_workspace_exclusions`	`organisation_settings.read/update` and `organisation_exclusions.list/update`
Log exports (8)	`create_log_export`, `list_log_exports`, `get_log_export`, `start_log_export`, `cancel_log_export`, `download_log_export`, `update_log_export`, `get_log_export_field_restrictions`	Enterprise Logs Export + `logs.export`
SCIM groups (4)	`list_scim_groups`, `list_scim_workspace_mappings`, `create_scim_workspace_mapping`, `delete_scim_workspace_mapping`	SCIM enabled + organisation admin access

Feature	Required
Prompt completions (`run_prompt_completion`)	`completions.write` scope + billing metadata (`app`, `env`)
Org-level service API key creation via `create_api_key`	`organisation_service_api_keys.create` (Enterprise)

Variable	Default	Description
`PORTKEY_API_KEY`	(required)	Your Portkey API key
`PORTKEY_BASE_URL`	`https://api.portkey.ai/v1`	Portkey Admin API base URL. Prisma AIRS/SCM URLs are not compatible; credentialed requests never auto-follow redirects
`PORTKEY_ALLOW_PRIVATE_BASE_URL`	—	Set to `true` to allow a literal loopback/private `PORTKEY_BASE_URL`
`PORTKEY_ALLOW_INSECURE_HTTP`	—	Separately set to `true` only when a trusted self-hosted gateway cannot use HTTPS
`PORTKEY_TOOL_DOMAINS`	—	Server-side allowlist of the 22 domains: `users`, `workspaces`, `configs`, `deployments`, `keys`, `collections`, `prompts`, `analytics`, `guardrails`, `limits`, `audit`, `labels`, `partials`, `tracing`, `logging`, `providers`, `secret-references`, `integrations`, `mcp-integrations`, `mcp-servers`, `access-policies`, `egress-allowlist`. HTTP `?tools=` may narrow it but cannot expand it
`MCP_TOOL_DOMAINS`	—	Fallback for `PORTKEY_TOOL_DOMAINS`, used only when that is unset
`MCP_TRANSPORT`	`stdio`	`stdio` or `http`; the Docker image picks its entrypoint from this (set `http` for the HTTP server)
`MCP_HOST`	`127.0.0.1`	Bind address
`MCP_PORT`	`3000`	Port
`PORT`	—	Port override; takes precedence over `MCP_PORT` when set
`MCP_PUBLIC_BASE_URL`	—	Public absolute base URL to advertise from `/auth/info` and the status page; recommended for hosted deployments
`MCP_AUTH_MODE`	`none`	`none`, `bearer`, or `clerk` (`none` is blocked for HTTP unless explicitly overridden)
`MCP_AUTH_TOKEN`	—	Secret for bearer auth
`CLERK_ISSUER` / `CLERK_AUDIENCE`	—	Required issuer and audience when `MCP_AUTH_MODE=clerk`
`CLERK_JWKS_URL`	`<CLERK_ISSUER>/.well-known/jwks.json`	JWKS endpoint for Clerk JWT verification; must be HTTPS. Set it only when the JWKS isn't at the default path
`CLERK_ALLOWED_SUBJECTS`	—	Optional CSV subject allowlist for Clerk; at least one Clerk authorization policy is required
`CLERK_ALLOWED_ORGANIZATION_IDS` / `CLERK_ALLOWED_ROLES`	—	Optional CSV organization and role constraints; every configured constraint must match
`CLERK_REQUIRED_PERMISSIONS`	—	Optional CSV permissions that must all be present in the verified Clerk JWT
`MCP_ALLOW_UNAUTHENTICATED_HTTP`	—	Set to `true` only for intentional local unauthenticated HTTP debugging
`MCP_MAX_SESSIONS`	`100`	Maximum concurrent HTTP MCP request handlers (retained name)
`MCP_REDIS_URL`	—	Fallback Redis URL for shared rate limiting, after `RATE_LIMIT_REDIS_URL` and before `REDIS_URL`; production requires `rediss://`
`MCP_SESSION_MODE`, `MCP_SESSION_TIMEOUT`, `MCP_EVENT_*`, `MCP_REDIS_KEY_PREFIX`	Ignored as of 0.15.0	Old session/replay settings produce a warning containing names only. 0.14.x behavior is unchanged; see compatibility.
`MCP_TLS_KEY_PATH`	—	TLS key for native HTTPS
`MCP_TLS_CERT_PATH`	—	TLS cert for native HTTPS
`MCP_TLS_CA_PATH`	—	Optional CA bundle for native HTTPS; only used when the TLS key and cert are set
`MCP_SHUTDOWN_TIMEOUT_MS`	`10000`	How long graceful shutdown waits before the process is forced to exit, in milliseconds; must be positive
`MCP_MAX_REQUEST_SIZE`	`1mb`	Maximum HTTP request body size; tool arguments also have a fixed budget of 10,000 array elements and object members, counted across nested input
`MCP_READY_CHECK_MODE`	`local`	`local` or `portkey`; `portkey` makes `/ready` also check Portkey connectivity
`LOG_LEVEL`	`info`	`debug`, `info`, `warn`, or `error`
`ALLOWED_ORIGINS`	—	CORS allow-list; also used to validate the `Host` header (DNS-rebinding protection) when `MCP_AUTH_MODE=none`
`CORS_ORIGIN`	—	Legacy fallback for `ALLOWED_ORIGINS`, used only when that is unset
`MCP_TRUST_PROXY`	`loopback`	Express trust-proxy policy. Use an exact nonnegative hop count or trusted proxy subnet; `true` is rejected because it trusts forwarding headers from every peer
`RATE_LIMIT_STORE`	`memory`	`redis` for multi-instance/serverless deployments; production memory mode requires `RATE_LIMIT_SINGLE_PROCESS=true`
`RATE_LIMIT_ENABLED`	`true`	Set to `false` to turn the pre-authentication rate limiter off
`RATE_LIMIT_SINGLE_PROCESS`	—	Set to `true` to acknowledge a single-process deployment when using in-memory limiting in production
`RATE_LIMIT_REDIS_URL`	—	Shared limiter Redis URL, falling back to `MCP_REDIS_URL`/`REDIS_URL`; production requires `rediss://`
`RATE_LIMIT_REDIS_KEY_PREFIX`	`mcp:rate-limit`	Redis namespace for atomic pre-authentication IP and principal-plus-IP token buckets
`RATE_LIMIT_MAX`	`60`	Maximum tokens in each pre-authentication IP and principal-plus-IP bucket
`RATE_LIMIT_WINDOW_MS`	`60000`	Rate-limit window in milliseconds
`RATE_LIMIT_REFILL`	`60`	Tokens refilled each window
`RATE_LIMIT_MAX_BUCKETS`	`10000`	Maximum local buckets in explicit memory mode before new clients share overflow capacity

Variable

Default

Description

PORTKEY_API_KEY

(required)

Your Portkey API key

PORTKEY_BASE_URL

https://api.portkey.ai/v1

Portkey Admin API base URL. Prisma AIRS/SCM URLs are not compatible; credentialed requests never auto-follow redirects

PORTKEY_ALLOW_PRIVATE_BASE_URL

—

Set to true to allow a literal loopback/private PORTKEY_BASE_URL

PORTKEY_ALLOW_INSECURE_HTTP

—

Separately set to true only when a trusted self-hosted gateway cannot use HTTPS

PORTKEY_TOOL_DOMAINS

—

Server-side allowlist of the 22 domains: users, workspaces, configs, deployments, keys, collections, prompts, analytics, guardrails, limits, audit, labels, partials, tracing, logging, providers, secret-references, integrations, mcp-integrations, mcp-servers, access-policies, egress-allowlist. HTTP ?tools= may narrow it but cannot expand it

MCP_TOOL_DOMAINS

—

Fallback for PORTKEY_TOOL_DOMAINS, used only when that is unset

MCP_TRANSPORT

stdio

stdio or http; the Docker image picks its entrypoint from this (set http for the HTTP server)

MCP_HOST

127.0.0.1

Bind address

MCP_PORT

3000

Port

PORT

—

Port override; takes precedence over MCP_PORT when set

MCP_PUBLIC_BASE_URL

—

Public absolute base URL to advertise from /auth/info and the status page; recommended for hosted deployments

MCP_AUTH_MODE

none

none, bearer, or clerk (none is blocked for HTTP unless explicitly overridden)

MCP_AUTH_TOKEN

—

Secret for bearer auth

CLERK_ISSUER / CLERK_AUDIENCE

—

Required issuer and audience when MCP_AUTH_MODE=clerk

CLERK_JWKS_URL

<CLERK_ISSUER>/.well-known/jwks.json

JWKS endpoint for Clerk JWT verification; must be HTTPS. Set it only when the JWKS isn't at the default path

CLERK_ALLOWED_SUBJECTS

—

Optional CSV subject allowlist for Clerk; at least one Clerk authorization policy is required

CLERK_ALLOWED_ORGANIZATION_IDS / CLERK_ALLOWED_ROLES

—

Optional CSV organization and role constraints; every configured constraint must match

CLERK_REQUIRED_PERMISSIONS

—

Optional CSV permissions that must all be present in the verified Clerk JWT

MCP_ALLOW_UNAUTHENTICATED_HTTP

—

Set to true only for intentional local unauthenticated HTTP debugging

MCP_MAX_SESSIONS

100

Maximum concurrent HTTP MCP request handlers (retained name)

MCP_REDIS_URL

—

Fallback Redis URL for shared rate limiting, after RATE_LIMIT_REDIS_URL and before REDIS_URL; production requires rediss://

MCP_SESSION_MODE, MCP_SESSION_TIMEOUT, MCP_EVENT_*, MCP_REDIS_KEY_PREFIX

Ignored as of 0.15.0

Old session/replay settings produce a warning containing names only. 0.14.x behavior is unchanged; see compatibility.

MCP_TLS_KEY_PATH

—

TLS key for native HTTPS

MCP_TLS_CERT_PATH

—

TLS cert for native HTTPS

MCP_TLS_CA_PATH

—

Optional CA bundle for native HTTPS; only used when the TLS key and cert are set

MCP_SHUTDOWN_TIMEOUT_MS

10000

How long graceful shutdown waits before the process is forced to exit, in milliseconds; must be positive

MCP_MAX_REQUEST_SIZE

1mb

Maximum HTTP request body size; tool arguments also have a fixed budget of 10,000 array elements and object members, counted across nested input

MCP_READY_CHECK_MODE

local

local or portkey; portkey makes /ready also check Portkey connectivity

LOG_LEVEL

info

debug, info, warn, or error

ALLOWED_ORIGINS

—

CORS allow-list; also used to validate the Host header (DNS-rebinding protection) when MCP_AUTH_MODE=none

CORS_ORIGIN

—

Legacy fallback for ALLOWED_ORIGINS, used only when that is unset

MCP_TRUST_PROXY

loopback

Express trust-proxy policy. Use an exact nonnegative hop count or trusted proxy subnet; true is rejected because it trusts forwarding headers from every peer

RATE_LIMIT_STORE

memory

redis for multi-instance/serverless deployments; production memory mode requires RATE_LIMIT_SINGLE_PROCESS=true

RATE_LIMIT_ENABLED

true

Set to false to turn the pre-authentication rate limiter off

RATE_LIMIT_SINGLE_PROCESS

—

Set to true to acknowledge a single-process deployment when using in-memory limiting in production

RATE_LIMIT_REDIS_URL

—

Shared limiter Redis URL, falling back to MCP_REDIS_URL/REDIS_URL; production requires rediss://

RATE_LIMIT_REDIS_KEY_PREFIX

mcp:rate-limit

Redis namespace for atomic pre-authentication IP and principal-plus-IP token buckets

RATE_LIMIT_MAX

60

Maximum tokens in each pre-authentication IP and principal-plus-IP bucket

RATE_LIMIT_WINDOW_MS

60000

Rate-limit window in milliseconds

RATE_LIMIT_REFILL

60

Tokens refilled each window

RATE_LIMIT_MAX_BUCKETS

10000

Maximum local buckets in explicit memory mode before new clients share overflow capacity

Path	Purpose
`GET /health`	Server liveness
`GET /ready`	Readiness (includes optional Portkey connectivity check)
`GET /auth/info`	Auth configuration metadata

이 서버 추가

Host a copy with our keys and logs.

서버 정보

문서

Claude Code

Cursor / Windsurf / VS Code

Run directly

Enterprise-gated tools (56)

Other scope requirements

Health Endpoints

Portkey Admin

도구

질문

Portkey Admin은(는) 어떻게 설치하나요?

Portkey Admin에 API 키가 필요한가요?

Portkey Admin은(는) 어떤 전송 방식을 사용하나요?

Portkey Admin은(는) 마지막으로 언제 확인되었나요?