# Transport configuration
# Options: stdio, http, sse
MCP_TRANSPORT=stdio
# Server configuration
MCP_SERVER_HOST=0.0.0.0
MCP_SERVER_PORT=8000
MCP_SSE_PORT=8001
# Auth configuration (recommended for HTTP/SSE)
MCP_AUTH_ENABLED=false
MCP_AUTH_MODE=bearer
MCP_AUTH_SCOPES=read,write
MCP_AUTH_AUDIENCE=
# OIDC/JWT verification
MCP_OIDC_ISSUER=
MCP_OIDC_JWKS_URL=
MCP_OIDC_INTROSPECTION_URL=
# Optional OAuth client credentials for introspection endpoints
MCP_OAUTH_CLIENT_ID=
MCP_OAUTH_CLIENT_SECRET=
# Legacy aliases (deprecated, still accepted for compatibility)
# MCP_OAUTH_ENABLED=
# MCP_OAUTH_PROVIDER_URL=
# MCP_OAUTH_SCOPES=
# Command controls
MCP_COMMAND_TIMEOUT_MS=900000
MCP_COMMAND_OUTPUT_LIMIT_BYTES=2097152
# Runtime
NODE_ENV=production
DEBUG=
NETWORK_MODE=bridge