How do I install Portkey Admin?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Portkey Admin need an API key?

The publisher lists these environment variables: PORTKEY_API_KEY, PORTKEY_TOOL_DOMAINS, PORTKEY_BASE_URL.

What transport does Portkey Admin use?

Portkey Admin runs locally over stdio.

When was Portkey Admin last checked?

Last checked 2026-11-14. Portkey Admin API control-plane MCP server with Prisma AIRS interoperability guidance.

Portkey Admin MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Credentials from the publisher

PORTKEY_API_KEY — Your Portkey API key for authentication
PORTKEY_TOOL_DOMAINS — Optional comma-separated tool domains to expose, for example prompts,analytics
PORTKEY_BASE_URL — Portkey Admin API base URL. Defaults to https://api.portkey.ai/v1; a Prisma AIRS or Strata Cloud Manager URL is not compatible

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1PORTKEY_API_KEY=<secret> PORTKEY_TOOL_DOMAINS=<value> PORTKEY_BASE_URL=<value> claude mcp add io.github.codeswhat-portkey-admin-mcp -- npx -y portkey-admin-mcp@0.16.4

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.codeswhat-portkey-admin-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ],9      "env": {10        "PORTKEY_API_KEY": "<secret>",11        "PORTKEY_TOOL_DOMAINS": "<value>",12        "PORTKEY_BASE_URL": "<value>"13      }14    }15  }16}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 0.16.4

From the publisher

Documentation

The Portkey Admin API as an MCP server — 194 tools across prompts, configs, keys, analytics, governance, deployments, and more.

[!IMPORTANT] Active compatibility development. Palo Alto Networks completed its Portkey acquisition on 2026‑05‑29 and now presents Portkey as the core of Prisma AIRS AI Gateway. The Portkey Admin API remains live, and its official OpenAPI and product changelog continued adding control-plane surfaces through October 2026; this project has therefore resumed API-coverage work. It targets the Portkey-compatible API (), not Prisma AIRS/Strata Cloud Manager directly. Palo Alto now publishes a Prisma AIRS management specification, but it uses different authentication, multiple management bases, and a smaller domain set, so it is not a swap. See the short for the supported side-by-side model and adapter criteria.

Category	Tools	Examples
Prompts	14	Create, version, render, execute, migrate, promote prompts
Prompt Partials	7	Reusable prompt fragments with versioning
Prompt Labels	5	Organize prompt versions (production, staging, dev)
Configs	6	Gateway routing, caching, retry, loadbalancing
Deployments	5	Register, inspect, update, and archive self-hosted Gateways
API Keys	6	Create, rotate, and manage scoped API keys
Secret References	5	Manage AWS, Azure, and HashiCorp external-secret references
Virtual Keys	5	Manage provider access keys
Collections	5	Group prompts by app or project
Providers	5	Manage AI provider configurations
Integrations	11	Provider integrations, model pricing, models, workspace access
MCP Integrations	10	External MCP tool integrations
MCP Servers	12	MCP server registry, capabilities, and live connections
Guardrails	14	LLM and MCP-tool policies, server mappings, organisation defaults, workspace exclusions
Access Policies	5	Allow/deny users, groups, and agents access to MCP tools and provider models
Egress Allowlist	5	Organisation trust for custom outbound hosts
Usage Limits	7	Cost and token consumption limits
Rate Limits	5	Request frequency controls
Analytics	25	Cost, latency, errors, tokens, cache, feedback, provider, MCP, A2A, and workspace groups
Logging	10	Log retrieval, ingestion, export, and field restrictions
Tracing	2	Feedback creation and updates on traces
Users & Workspaces	24	User management, invites, workspace members, SCIM group mappings
Audit	1	Audit log access

Area	Tools	Required scope
Analytics (25)	`get_cost_analytics`, `get_request_analytics`, `get_token_analytics`, `get_latency_analytics`, `get_error_analytics`, `get_error_rate_analytics`, `get_cache_hit_latency`, `get_cache_hit_rate`, `get_cache_summary`, `get_users_analytics`, `get_error_stacks_analytics`, `get_error_status_codes_analytics`, `get_user_requests_analytics`, `get_rescued_requests_analytics`, `get_feedback_analytics`, `get_feedback_models_analytics`, `get_feedback_scores_analytics`, `get_feedback_weighted_analytics`, `get_analytics_group_users`, `get_analytics_group_models`, `get_analytics_group_metadata`, `get_analytics_group_providers`, `get_analytics_group_mcp`, `get_analytics_group_a2a`, `get_analytics_group_workspaces`	org-level `analytics.view`
Deployments (5)	`list_deployments`, `register_deployment`, `get_deployment`, `update_deployment`, `archive_deployment`	Enterprise deployment administration
Audit	`list_audit_logs`	`audit_logs.list`
Org-level integrations	`get_integration`, `list_integration_models`, `list_integration_workspaces`	`organisation_integrations.read`
Org-level users	`list_all_users`, `get_user`, `get_user_stats`, `list_user_invites`	`organisation_users.list` / `organisation_users.read`
Organisation guardrails (6)	`get_organisation_defaults`, `update_organisation_defaults`, `list_input_guardrail_workspace_exclusions`, `update_input_guardrail_workspace_exclusions`, `list_output_guardrail_workspace_exclusions`, `update_output_guardrail_workspace_exclusions`	`organisation_settings.read/update` and `organisation_exclusions.list/update`
Log exports (8)	`create_log_export`, `list_log_exports`, `get_log_export`, `start_log_export`, `cancel_log_export`, `download_log_export`, `update_log_export`, `get_log_export_field_restrictions`	Enterprise Logs Export + `logs.export`
SCIM groups (4)	`list_scim_groups`, `list_scim_workspace_mappings`, `create_scim_workspace_mapping`, `delete_scim_workspace_mapping`	SCIM enabled + organisation admin access

Feature	Required
Prompt completions (`run_prompt_completion`)	`completions.write` scope + billing metadata (`app`, `env`)
Org-level service API key creation via `create_api_key`	`organisation_service_api_keys.create` (Enterprise)

Variable	Default	Description
`PORTKEY_API_KEY`	(required)	Your Portkey API key
`PORTKEY_BASE_URL`	`https://api.portkey.ai/v1`	Portkey Admin API base URL. Prisma AIRS/SCM URLs are not compatible; credentialed requests never auto-follow redirects
`PORTKEY_ALLOW_PRIVATE_BASE_URL`	—	Set to `true` to allow a literal loopback/private `PORTKEY_BASE_URL`
`PORTKEY_ALLOW_INSECURE_HTTP`	—	Separately set to `true` only when a trusted self-hosted gateway cannot use HTTPS
`PORTKEY_TOOL_DOMAINS`	—	Server-side allowlist of the 22 domains: `users`, `workspaces`, `configs`, `deployments`, `keys`, `collections`, `prompts`, `analytics`, `guardrails`, `limits`, `audit`, `labels`, `partials`, `tracing`, `logging`, `providers`, `secret-references`, `integrations`, `mcp-integrations`, `mcp-servers`, `access-policies`, `egress-allowlist`. HTTP `?tools=` may narrow it but cannot expand it
`MCP_TOOL_DOMAINS`	—	Fallback for `PORTKEY_TOOL_DOMAINS`, used only when that is unset
`MCP_TRANSPORT`	`stdio`	`stdio` or `http`; the Docker image picks its entrypoint from this (set `http` for the HTTP server)
`MCP_HOST`	`127.0.0.1`	Bind address
`MCP_PORT`	`3000`	Port
`PORT`	—	Port override; takes precedence over `MCP_PORT` when set
`MCP_PUBLIC_BASE_URL`	—	Public absolute base URL to advertise from `/auth/info` and the status page; recommended for hosted deployments
`MCP_AUTH_MODE`	`none`	`none`, `bearer`, or `clerk` (`none` is blocked for HTTP unless explicitly overridden)
`MCP_AUTH_TOKEN`	—	Secret for bearer auth
`CLERK_ISSUER` / `CLERK_AUDIENCE`	—	Required issuer and audience when `MCP_AUTH_MODE=clerk`
`CLERK_JWKS_URL`	`<CLERK_ISSUER>/.well-known/jwks.json`	JWKS endpoint for Clerk JWT verification; must be HTTPS. Set it only when the JWKS isn't at the default path
`CLERK_ALLOWED_SUBJECTS`	—	Optional CSV subject allowlist for Clerk; at least one Clerk authorization policy is required
`CLERK_ALLOWED_ORGANIZATION_IDS` / `CLERK_ALLOWED_ROLES`	—	Optional CSV organization and role constraints; every configured constraint must match
`CLERK_REQUIRED_PERMISSIONS`	—	Optional CSV permissions that must all be present in the verified Clerk JWT
`MCP_ALLOW_UNAUTHENTICATED_HTTP`	—	Set to `true` only for intentional local unauthenticated HTTP debugging
`MCP_SESSION_MODE`	`stateful`	`stateful` or `stateless`
`MCP_SESSION_TIMEOUT`	`3600000`	Idle timeout for stateful sessions, in milliseconds; `0` or more
`MCP_MAX_SESSIONS`	`100`	Maximum concurrent stateful sessions or active stateless request handlers
`MCP_EVENT_STORE`	`off`	`off`, `memory`, or `redis`; stateless `GET /mcp` replay requires `memory` or `redis`
`MCP_EVENT_TTL_SECONDS`	`300`	Replay retention in seconds
`MCP_EVENT_STORE_MAX_EVENTS`	`10000`	Maximum events retained by the in-memory replay store; oldest events are evicted first
`MCP_EVENT_STORE_MAX_BYTES`	`67108864`	Approximate maximum serialized bytes retained by the in-memory replay store
`MCP_EVENT_STORE_COMMAND_TIMEOUT_MS`	`5000`	Redis command timeout for the event store, in milliseconds; `0` disables the timeout (restores unbounded pre-v6 behavior)
`MCP_REDIS_URL`	—	Redis URL for shared event store; production requires `rediss://` and ACL-scoped credentials
`MCP_EVENT_ENCRYPTION_KEY`	—	Required 32-byte base64 AES key for Redis replay payloads; generate with `openssl rand -base64 32`
`MCP_REDIS_KEY_PREFIX`	`mcp:event-store`	Dedicated Redis namespace for replay data
`MCP_TLS_KEY_PATH`	—	TLS key for native HTTPS
`MCP_TLS_CERT_PATH`	—	TLS cert for native HTTPS
`MCP_TLS_CA_PATH`	—	Optional CA bundle for native HTTPS; only used when the TLS key and cert are set
`MCP_SHUTDOWN_TIMEOUT_MS`	`10000`	How long graceful shutdown waits before the process is forced to exit, in milliseconds; must be positive
`MCP_MAX_REQUEST_SIZE`	`1mb`	Maximum HTTP request body size; tool arguments also have a fixed budget of 10,000 array elements and object members, counted across nested input
`MCP_READY_CHECK_MODE`	`local`	`local` or `portkey`; `portkey` makes `/ready` also check Portkey connectivity
`LOG_LEVEL`	`info`	`debug`, `info`, `warn`, or `error`
`ALLOWED_ORIGINS`	—	CORS allow-list; also used to validate the `Host` header (DNS-rebinding protection) when `MCP_AUTH_MODE=none`
`CORS_ORIGIN`	—	Legacy fallback for `ALLOWED_ORIGINS`, used only when that is unset
`MCP_TRUST_PROXY`	`loopback`	Express trust-proxy policy. Use an exact nonnegative hop count or trusted proxy subnet; `true` is rejected because it trusts forwarding headers from every peer
`RATE_LIMIT_STORE`	`memory`	`redis` for multi-instance/serverless deployments; production memory mode requires `RATE_LIMIT_SINGLE_PROCESS=true`
`RATE_LIMIT_ENABLED`	`true`	Set to `false` to turn the pre-authentication rate limiter off
`RATE_LIMIT_SINGLE_PROCESS`	—	Set to `true` to acknowledge a single-process deployment when using in-memory limiting in production
`RATE_LIMIT_REDIS_URL`	—	Shared limiter Redis URL, falling back to `MCP_REDIS_URL`/`REDIS_URL`; production requires `rediss://`
`RATE_LIMIT_REDIS_KEY_PREFIX`	`mcp:rate-limit`	Redis namespace for atomic pre-authentication IP and principal-plus-IP token buckets
`RATE_LIMIT_MAX`	`60`	Maximum tokens in each pre-authentication IP and principal-plus-IP bucket
`RATE_LIMIT_WINDOW_MS`	`60000`	Rate-limit window in milliseconds
`RATE_LIMIT_REFILL`	`60`	Tokens refilled each window
`RATE_LIMIT_MAX_BUCKETS`	`10000`	Maximum local buckets in explicit memory mode before new clients share overflow capacity

Variable

Default

Description

PORTKEY_API_KEY

(required)

Your Portkey API key

PORTKEY_BASE_URL

https://api.portkey.ai/v1

Portkey Admin API base URL. Prisma AIRS/SCM URLs are not compatible; credentialed requests never auto-follow redirects

PORTKEY_ALLOW_PRIVATE_BASE_URL

—

Set to true to allow a literal loopback/private PORTKEY_BASE_URL

PORTKEY_ALLOW_INSECURE_HTTP

—

Separately set to true only when a trusted self-hosted gateway cannot use HTTPS

PORTKEY_TOOL_DOMAINS

—

Server-side allowlist of the 22 domains: users, workspaces, configs, deployments, keys, collections, prompts, analytics, guardrails, limits, audit, labels, partials, tracing, logging, providers, secret-references, integrations, mcp-integrations, mcp-servers, access-policies, egress-allowlist. HTTP ?tools= may narrow it but cannot expand it

MCP_TOOL_DOMAINS

—

Fallback for PORTKEY_TOOL_DOMAINS, used only when that is unset

MCP_TRANSPORT

stdio

stdio or http; the Docker image picks its entrypoint from this (set http for the HTTP server)

MCP_HOST

127.0.0.1

Bind address

MCP_PORT

3000

Port

PORT

—

Port override; takes precedence over MCP_PORT when set

MCP_PUBLIC_BASE_URL

—

Public absolute base URL to advertise from /auth/info and the status page; recommended for hosted deployments

MCP_AUTH_MODE

none

none, bearer, or clerk (none is blocked for HTTP unless explicitly overridden)

MCP_AUTH_TOKEN

—

Secret for bearer auth

CLERK_ISSUER / CLERK_AUDIENCE

—

Required issuer and audience when MCP_AUTH_MODE=clerk

CLERK_JWKS_URL

<CLERK_ISSUER>/.well-known/jwks.json

JWKS endpoint for Clerk JWT verification; must be HTTPS. Set it only when the JWKS isn't at the default path

CLERK_ALLOWED_SUBJECTS

—

Optional CSV subject allowlist for Clerk; at least one Clerk authorization policy is required

CLERK_ALLOWED_ORGANIZATION_IDS / CLERK_ALLOWED_ROLES

—

Optional CSV organization and role constraints; every configured constraint must match

CLERK_REQUIRED_PERMISSIONS

—

Optional CSV permissions that must all be present in the verified Clerk JWT

MCP_ALLOW_UNAUTHENTICATED_HTTP

—

Set to true only for intentional local unauthenticated HTTP debugging

MCP_SESSION_MODE

stateful

stateful or stateless

MCP_SESSION_TIMEOUT

3600000

Idle timeout for stateful sessions, in milliseconds; 0 or more

MCP_MAX_SESSIONS

100

Maximum concurrent stateful sessions or active stateless request handlers

MCP_EVENT_STORE

off

off, memory, or redis; stateless GET /mcp replay requires memory or redis

MCP_EVENT_TTL_SECONDS

300

Replay retention in seconds

MCP_EVENT_STORE_MAX_EVENTS

10000

Maximum events retained by the in-memory replay store; oldest events are evicted first

MCP_EVENT_STORE_MAX_BYTES

67108864

Approximate maximum serialized bytes retained by the in-memory replay store

MCP_EVENT_STORE_COMMAND_TIMEOUT_MS

5000

Redis command timeout for the event store, in milliseconds; 0 disables the timeout (restores unbounded pre-v6 behavior)

MCP_REDIS_URL

—

Redis URL for shared event store; production requires rediss:// and ACL-scoped credentials

MCP_EVENT_ENCRYPTION_KEY

—

Required 32-byte base64 AES key for Redis replay payloads; generate with openssl rand -base64 32

MCP_REDIS_KEY_PREFIX

mcp:event-store

Dedicated Redis namespace for replay data

MCP_TLS_KEY_PATH

—

TLS key for native HTTPS

MCP_TLS_CERT_PATH

—

TLS cert for native HTTPS

MCP_TLS_CA_PATH

—

Optional CA bundle for native HTTPS; only used when the TLS key and cert are set

MCP_SHUTDOWN_TIMEOUT_MS

10000

How long graceful shutdown waits before the process is forced to exit, in milliseconds; must be positive

MCP_MAX_REQUEST_SIZE

1mb

Maximum HTTP request body size; tool arguments also have a fixed budget of 10,000 array elements and object members, counted across nested input

MCP_READY_CHECK_MODE

local

local or portkey; portkey makes /ready also check Portkey connectivity

LOG_LEVEL

info

debug, info, warn, or error

ALLOWED_ORIGINS

—

CORS allow-list; also used to validate the Host header (DNS-rebinding protection) when MCP_AUTH_MODE=none

CORS_ORIGIN

—

Legacy fallback for ALLOWED_ORIGINS, used only when that is unset

MCP_TRUST_PROXY

loopback

Express trust-proxy policy. Use an exact nonnegative hop count or trusted proxy subnet; true is rejected because it trusts forwarding headers from every peer

RATE_LIMIT_STORE

memory

redis for multi-instance/serverless deployments; production memory mode requires RATE_LIMIT_SINGLE_PROCESS=true

RATE_LIMIT_ENABLED

true

Set to false to turn the pre-authentication rate limiter off

RATE_LIMIT_SINGLE_PROCESS

—

Set to true to acknowledge a single-process deployment when using in-memory limiting in production

RATE_LIMIT_REDIS_URL

—

Shared limiter Redis URL, falling back to MCP_REDIS_URL/REDIS_URL; production requires rediss://

RATE_LIMIT_REDIS_KEY_PREFIX

mcp:rate-limit

Redis namespace for atomic pre-authentication IP and principal-plus-IP token buckets

RATE_LIMIT_MAX

60

Maximum tokens in each pre-authentication IP and principal-plus-IP bucket

RATE_LIMIT_WINDOW_MS

60000

Rate-limit window in milliseconds

RATE_LIMIT_REFILL

60

Tokens refilled each window

RATE_LIMIT_MAX_BUCKETS

10000

Maximum local buckets in explicit memory mode before new clients share overflow capacity

Path	Purpose
`GET /health`	Server liveness
`GET /ready`	Readiness (includes optional Portkey connectivity check)
`GET /auth/info`	Auth configuration metadata

Add this server

Host a copy with our keys and logs.

Server facts

Documentation

Claude Code

Cursor / Windsurf / VS Code

Run directly

Enterprise-gated tools (56)

Other scope requirements

Health Endpoints

Built With

Portkey Admin

Tools

Questions

How do I install Portkey Admin?

Does Portkey Admin need an API key?

What transport does Portkey Admin use?

When was Portkey Admin last checked?