fix(agentic-ai): forward configured env vars for STDIO MCP client transport by Copilot · Pull Request #7163 · camunda/connectors

Copilot · 2026-05-08T06:35:00Z

STDIO MCP client configuration accepted env values but dropped them when building MCP SDK ServerParameters, so spawned MCP server processes did not receive required environment variables (for example tokens/API keys). This change wires env through and adds a focused regression test.

Behavior fix: propagate STDIO env to MCP SDK transport
- Updated McpSdkClientFactory#createStdioTransport to pass StdioMcpClientTransportConfiguration.env() into ServerParameters.
Regression coverage
- Added a test in McpSdkClientFactoryTest that verifies configured STDIO env entries are present in the generated ServerParameters.

return new StdioClientTransport(
    ServerParameters.builder(stdioConfig.command())
        .args(stdioConfig.args())
        .env(stdioConfig.env())
        .build(),
    McpJsonDefaults.getMapper());

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

jfrog-prod-euc1-shared-frankfurt-main.s3.amazonaws.com
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
repository.jboss.org
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
repository.sonatype.org
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/a5170b84-1cbf-4652-9fab-0a13e6c22f5c Co-authored-by: maff <27403+maff@users.noreply.github.com>

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/887c1731-fe31-4eab-b4bf-ce11b1eaee87 Co-authored-by: maff <27403+maff@users.noreply.github.com>

Copilot · 2026-05-08T07:19:18Z

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

jfrog-prod-euc1-shared-frankfurt-main.s3.amazonaws.com
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
repository.jboss.org
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
repository.sonatype.org
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Covers default, no-args, and no-env configurations in dedicated stdio client tests instead of a separate env-only test.

Copilot

Pull request overview

Fixes STDIO MCP client process spawning so that configured environment variables are forwarded into the MCP SDK ServerParameters, ensuring spawned MCP servers receive required env (e.g., tokens/API keys).

Changes:

Propagate StdioMcpClientTransportConfiguration.env() into MCP SDK ServerParameters when creating STDIO transport.
Extend unit tests to assert the generated ServerParameters includes the configured command, args, and env.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
connectors/agentic-ai/src/main/java/io/camunda/connector/agenticai/mcp/client/framework/mcpsdk/McpSdkClientFactory.java	Wires STDIO `env` config into `ServerParameters` for spawned MCP server processes.
connectors/agentic-ai/src/test/java/io/camunda/connector/agenticai/mcp/client/framework/mcpsdk/McpSdkClientFactoryTest.java	Adds regression assertions by extracting `ServerParameters` from the created client and verifying env propagation.

Replace reflection into McpSyncClient internals with Mockito.mockConstruction(StdioClientTransport) to capture the ServerParameters argument directly. Asserts run against the real built object instead of private SDK fields.

nikonovd

🚀

team-connectors-int-automation · 2026-05-08T09:36:04Z

Successfully created backport PR for stable/8.9:

[Backport stable/8.9] fix(agentic-ai): forward configured env vars for STDIO MCP client transport #7165

…nsport (#7163) (#7165) * Initial plan * fix(agentic-ai): forward stdio env into MCP server parameters Agent-Logs-Url: https://github.com/camunda/connectors/sessions/a5170b84-1cbf-4652-9fab-0a13e6c22f5c * test(agentic-ai): assert stdio env via built client path Agent-Logs-Url: https://github.com/camunda/connectors/sessions/887c1731-fe31-4eab-b4bf-ce11b1eaee87 * test(agentic-ai): assert stdio command/args/env across configurations Covers default, no-args, and no-env configurations in dedicated stdio client tests instead of a separate env-only test. * test(agentic-ai): capture stdio ServerParameters via mockConstruction Replace reflection into McpSyncClient internals with Mockito.mockConstruction(StdioClientTransport) to capture the ServerParameters argument directly. Asserts run against the real built object instead of private SDK fields. --------- (cherry picked from commit e68f7f9) Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: maff <27403+maff@users.noreply.github.com> Co-authored-by: Mathias Geat <mathias.geat@camunda.com>

Initial plan

5161246

Copilot AI assigned Copilot and maff May 8, 2026

Copilot started work on behalf of maff May 8, 2026 06:35 View session

Copilot AI linked an issue May 8, 2026 that may be closed by this pull request

STDIO MCP client does not pass configured env variables to the spawned process #7162

Closed

fix(agentic-ai): forward stdio env into MCP server parameters

ed477c3

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/a5170b84-1cbf-4652-9fab-0a13e6c22f5c Co-authored-by: maff <27403+maff@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix issue with env variables not passed to spawned process~~ Forward configured env vars for STDIO MCP client transport May 8, 2026

Copilot finished work on behalf of maff May 8, 2026 06:49

Copilot AI requested a review from maff May 8, 2026 06:49

maff reviewed May 8, 2026

View reviewed changes

Comment thread ...java/io/camunda/connector/agenticai/mcp/client/framework/mcpsdk/McpSdkClientFactoryTest.java

Copilot started work on behalf of maff May 8, 2026 07:11 View session

test(agentic-ai): assert stdio env via built client path

e954b2f

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/887c1731-fe31-4eab-b4bf-ce11b1eaee87 Co-authored-by: maff <27403+maff@users.noreply.github.com>

Copilot finished work on behalf of maff May 8, 2026 07:19

Copilot AI requested a review from maff May 8, 2026 07:19

test(agentic-ai): assert stdio command/args/env across configurations

51a51e4

Covers default, no-args, and no-env configurations in dedicated stdio client tests instead of a separate env-only test.

maff changed the title ~~Forward configured env vars for STDIO MCP client transport~~ fix(agentic-ai): forward configured env vars for STDIO MCP client transport May 8, 2026

maff approved these changes May 8, 2026

View reviewed changes

maff requested a review from nikonovd May 8, 2026 07:37

maff added the backport stable/8.9 label May 8, 2026

maff marked this pull request as ready for review May 8, 2026 08:19

maff requested a review from a team as a code owner May 8, 2026 08:19

Copilot AI review requested due to automatic review settings May 8, 2026 08:19

maff requested a review from a team as a code owner May 8, 2026 08:19

maff requested a review from chillleader May 8, 2026 08:19

Copilot started reviewing on behalf of maff May 8, 2026 08:20 View session

Copilot AI reviewed May 8, 2026

View reviewed changes

Comment thread ...java/io/camunda/connector/agenticai/mcp/client/framework/mcpsdk/McpSdkClientFactoryTest.java Outdated

maff force-pushed the copilot/fix-env-variables-issue branch from e9b85c6 to 9cf250c Compare May 8, 2026 09:03

nikonovd approved these changes May 8, 2026

View reviewed changes

maff enabled auto-merge May 8, 2026 09:05

maff added the agentic-ai label May 8, 2026

maff removed the request for review from chillleader May 8, 2026 09:13

maff added this pull request to the merge queue May 8, 2026

Merged via the queue into main with commit e68f7f9 May 8, 2026
31 checks passed

maff deleted the copilot/fix-env-variables-issue branch May 8, 2026 09:35

team-connectors-int-automation Bot mentioned this pull request May 8, 2026

[Backport stable/8.9] fix(agentic-ai): forward configured env vars for STDIO MCP client transport #7165

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(agentic-ai): forward configured env vars for STDIO MCP client transport#7163

fix(agentic-ai): forward configured env vars for STDIO MCP client transport#7163
maff merged 5 commits into
mainfrom
copilot/fix-env-variables-issue

Copilot AI commented May 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI commented May 8, 2026

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

nikonovd left a comment

Uh oh!

Uh oh!

team-connectors-int-automation Bot commented May 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Copilot AI commented May 8, 2026

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

nikonovd left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

team-connectors-int-automation Bot commented May 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented May 8, 2026 •

edited

Loading