Manage permissions in Volcengine IAM access control using natural language.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add iam --env VOLCENGINE_ACCESS_KEY='<VOLCENGINE_ACCESS_KEY>' --env VOLCENGINE_ACCESS_SESSION_TOKEN='<VOLCENGINE_ACCESS_SESSION_TOKEN>' --env VOLCENGINE_SECRET_KEY='<VOLCENGINE_SECRET_KEY>' -- uv --directory /ABSOLUTE/PATH/TO/PARENT/FOLDER run mcp-server-iam~/.codex/config.toml
[mcp_servers.iam]
command = "uv"
args = ["--directory", "/ABSOLUTE/PATH/TO/PARENT/FOLDER", "run", "mcp-server-iam"]
env = { VOLCENGINE_ACCESS_KEY = "<VOLCENGINE_ACCESS_KEY>", VOLCENGINE_ACCESS_SESSION_TOKEN = "<VOLCENGINE_ACCESS_SESSION_TOKEN>", VOLCENGINE_SECRET_KEY = "<VOLCENGINE_SECRET_KEY>" }
# codex mcp add iam --env VOLCENGINE_ACCESS_KEY='<VOLCENGINE_ACCESS_KEY>' --env VOLCENGINE_ACCESS_SESSION_TOKEN='<VOLCENGINE_ACCESS_SESSION_TOKEN>' --env VOLCENGINE_SECRET_KEY='<VOLCENGINE_SECRET_KEY>' -- uv --directory /ABSOLUTE/PATH/TO/PARENT/FOLDER run mcp-server-iam~/.cursor/mcp.json
{
"mcpServers": {
"iam": {
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/PARENT/FOLDER",
"run",
"mcp-server-iam"
],
"env": {
"VOLCENGINE_ACCESS_KEY": "<VOLCENGINE_ACCESS_KEY>",
"VOLCENGINE_ACCESS_SESSION_TOKEN": "<VOLCENGINE_ACCESS_SESSION_TOKEN>",
"VOLCENGINE_SECRET_KEY": "<VOLCENGINE_SECRET_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"iam": {
"type": "stdio",
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/PARENT/FOLDER",
"run",
"mcp-server-iam"
],
"env": {
"VOLCENGINE_ACCESS_KEY": "<VOLCENGINE_ACCESS_KEY>",
"VOLCENGINE_ACCESS_SESSION_TOKEN": "<VOLCENGINE_ACCESS_SESSION_TOKEN>",
"VOLCENGINE_SECRET_KEY": "<VOLCENGINE_SECRET_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"iam": {
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/PARENT/FOLDER",
"run",
"mcp-server-iam"
],
"env": {
"VOLCENGINE_ACCESS_KEY": "<VOLCENGINE_ACCESS_KEY>",
"VOLCENGINE_ACCESS_SESSION_TOKEN": "<VOLCENGINE_ACCESS_SESSION_TOKEN>",
"VOLCENGINE_SECRET_KEY": "<VOLCENGINE_SECRET_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"iam": {
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/PARENT/FOLDER",
"run",
"mcp-server-iam"
],
"env": {
"VOLCENGINE_ACCESS_KEY": "<VOLCENGINE_ACCESS_KEY>",
"VOLCENGINE_ACCESS_SESSION_TOKEN": "<VOLCENGINE_ACCESS_SESSION_TOKEN>",
"VOLCENGINE_SECRET_KEY": "<VOLCENGINE_SECRET_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"iam": {
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/PARENT/FOLDER",
"run",
"mcp-server-iam"
],
"env": {
"VOLCENGINE_ACCESS_KEY": "<VOLCENGINE_ACCESS_KEY>",
"VOLCENGINE_ACCESS_SESSION_TOKEN": "<VOLCENGINE_ACCESS_SESSION_TOKEN>",
"VOLCENGINE_SECRET_KEY": "<VOLCENGINE_SECRET_KEY>"
}
}
}
}Environment variables
VOLCENGINE_ACCESS_KEYVOLCENGINE_ACCESS_SESSION_TOKENVOLCENGINE_SECRET_KEY
Replace the placeholders with your own credentials and keep them out of version control.