HTTPS URL
Publish a stable public endpoint. Localhost and private network addresses cannot be used by registry consumers.
REMOTE MCP SERVER.JSON
Describe the endpoint,
not the credential.
Remote registry entries should expose a reachable HTTPS URL and declare required headers or URL variables without embedding private values.
Remote metadata essentials
Transport
Prefer streamable HTTP for current remote MCP servers. Treat legacy SSE configurations as migration candidates.
Secret inputs
Describe authorization headers as secret variables. Never place a bearer token directly in server.json.