Mcp Aemps

Please install the `mcp-aemps` MCP server into my current AI client (that's you).

Optional prerequisites:
- Install uv — Install the uv tool, which is the recommended zero-install runner used by the default stdio setup. (https://docs.astral.sh/uv/)
- Alternative runtime: Python — If you do not use uv, you can install Python and the package via pip or pipx instead. Run: `pip install mcp-aemps`
- Optional Docker runtime — Docker can be used for shared HTTP deployments instead of the default stdio setup. Run: `docker run -p 8765:8765 ghcr.io/romanpert/mcp-aemps:latest`

Canonical MCP server config (stdio transport):
- command: `uvx`
- args: ["mcp-aemps@latest","stdio"]
- optional environment variables:
  - `UVICORN_HOST`: Host/interface for the HTTP server components. Default is 127.0.0.1; use 0.0.0.0 for Docker or reverse-proxy scenarios. (example: `<host-interface>`)
  - `PORT`: HTTP port. Default is 8765; the server can auto-fallback if the port is occupied. (example: `<port>`)
  - `REDIS_URL`: Enables distributed cache and shared rate limiting between replicas. (example: `<your-redis-url>`)
  - `MCP_AEMPS_LOCALE`: Locale for responses and prompts. Supported values: es or en; defaults to auto-detect from the OS. (example: `<es-or-en>`)
  - `MCP_AEMPS_DNS_REBINDING_PROTECTION`: Enables Host/Origin validation on /mcp. Default is true. (example: `<true-or-false>`)
  - `MCP_AEMPS_ALLOWED_HOSTS`: Allowed hosts for reverse-proxy or shared HTTP deployments when DNS rebinding protection is enabled. (example: `<your-domain>`)
  - `METRICS_KEY`: Required only if you want to enable the /internal/metrics endpoint. (example: `<your-metrics-key>`)
  - `OAUTH_ENABLED`: Enable OAuth 2.1 resource-server mode for multi-tenant/shared deployments. (example: `<true-or-false>`)
  - `OAUTH_ISSUER`: OAuth issuer URL. Needed when OAuth is enabled. (example: `<your-oauth-issuer>`)
  - `OAUTH_JWKS_URL`: JWKS endpoint URL for token verification. Needed when OAuth is enabled. (example: `<your-jwks-url>`)
  - `OAUTH_AUDIENCE`: Expected OAuth audience. Needed when OAuth is enabled. (example: `<your-oauth-audience>`)
  - `OAUTH_REQUIRED_SCOPES`: Required OAuth scopes for access. Needed when OAuth is enabled. (example: `<scope1 scope2>`)
  - `LOG_LEVEL`: Logging level. Default is INFO. (example: `<log-level>`)
  - `LOG_RETENTION_DAYS`: Retention period for audit logs, mentioned in compliance/security notes. (example: `<days>`)

Note: The README states that no environment variables are required for the default setup. The preferred canonical client config is stdio using `uvx mcp-aemps@latest stdio`. The README also documents shared HTTP deployment via `mcp-aemps up --bind-all`, but it does not provide a single canonical MCP HTTP URL for client config, so only stdio is extracted.

Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.