SSO MCP Server

# SSO MCP Server Configuration # Copy this file to .env and fill in your values # ============================================================================= # Authentication Mode # ============================================================================= # Options: local, cloud, auto # - local: Browser-based Azure SSO (default, for desktop use) # - cloud: Bearer token validation (for server deployments) # - auto: Detects mode from request (Bearer header = cloud, else local) AUTH_MODE=local # ============================================================================= # Local Mode Configuration (AUTH_MODE=local) # ============================================================================= # Required for local mode - get these from your Azure App Registration AZURE_CLIENT_ID=your-app-registration-client-id AZURE_TENANT_ID=your-azure-tenant-id # Token Cache (Optional - defaults to ~/.sso-mcp-server/token_cache.bin) # TOKEN_CACHE_PATH=~/.sso-mcp-server/token_cache.bin # ============================================================================= # Cloud Mode Configuration (AUTH_MODE=cloud) # ============================================================================= # Required for cloud mode - your API's resource identifier (audience) # This must match the 'aud' claim in incoming tokens # Examples: api://your-app-id, https://your-api.example.com # RESOURCE_IDENTIFIER=api://your-app-id # Required for cloud mode - comma-separated list of allowed token issuers # For Azure Entra ID: https://login.microsoftonline.com/{tenant-id}/v2.0 # ALLOWED_ISSUERS=https://login.microsoftonline.com/your-tenant-id/v2.0 # Optional: JWKS cache TTL in seconds (default: 3600) # JWKS_CACHE_TTL=3600 # Optional: Supported scopes for Protected Resource Metadata # SCOPES_SUPPORTED=checklist.read,checklist.list # ============================================================================= # Server Configuration # ============================================================================= # Required: Directory containing checklist markdown files CHECKLIST_DIR=./checklists # Optional: Directory containing process markdown files (default: ./processes) # PROCESS_DIR=./processes # Optional: Server port (default: 8080) MCP_PORT=8080 # Optional: Log level (DEBUG, INFO, WARNING, ERROR) LOG_LEVEL=INFO