StudentManagementMCP_Server

MCP server for student management with CRUD operations, supporting user authentication and student record management.

README

pip install -e . (or pip install -r requirements.txt if provided separately).
Copy .env.example to .env and fill in the values below, or have your deployment platform inject them as environment variables directly - nothing here contains real credentials.
Run: python server.py

Variable	Secret?	Purpose
`STUDENT_MANAGEMENT_CRUD_BASE_URL`	no	Base URL of the running student_management_crud API instance
`STUDENT_MANAGEMENT_CRUD_BEARER_TOKEN`	yes	Static bearer token

Two transports, selected via MCP_TRANSPORT:

stdio (default) - the standard subprocess transport most MCP hosts use.
streamable-http - hosts this server over HTTP/HTTPS at /mcp, so it can run as a standalone network service. Configure with:
- HOST (default 0.0.0.0), PORT (default 8000)
- MCP_TLS_CERTFILE / MCP_TLS_KEYFILE - set both to serve HTTPS directly; otherwise plain HTTP is served (fine behind a TLS-terminating proxy/ingress).
Example: MCP_TRANSPORT=streamable-http PORT=8000 python server.py

register_user - Register a new application user with a username (email), password, and optional identity roles (e.g. Reader, Writer).
login - Authenticate with username and password, returning a short-lived JWT access token and a refresh token.
refresh_token - Exchange an expired JWT plus its matching refresh token for a newly issued JWT/refresh token pair.
get_all_students - List all students (requires a JWT bearer token for a user in the 'Reader' role).
get_student_by_id - Get a single student by numeric id (requires a JWT bearer token for a user in the 'Reader' role).
add_student - Create a new student record with name, optional image, and class id (requires a JWT bearer token for a user in the 'Writer' role).
update_student - Update an existing student's name, image, and class id by id (requires a JWT bearer token for a user in the 'Writer' role).
delete_student - Delete a student by id (requires a JWT bearer token for a user in the 'Reader' or 'Writer' role).