.env.example•1.87 kB
# GitHub MCP SSE Server Configuration
# GitHub API Token (required for API access)
# Generate a token at https://github.com/settings/tokens
GITHUB_TOKEN=your_github_token_here
# Server Port Configuration
MCP_SSE_PORT=3200
# Timeout Configuration (in milliseconds)
MCP_TIMEOUT=180000
# Log Level (debug, info, warn, error)
LOG_LEVEL=info
# CORS Configuration
# Specifies the allowed origin for CORS. Use '*' for all origins or a specific URL (e.g., https://example.com).
CORS_ALLOW_ORIGIN=*
# Authentication
API_KEY=your-secret-api-key
# Multiplexing SSE Transport Configuration
# Set to 'true' to enable multiplexing SSE transport (handles multiple clients with a single transport)
# Set to 'false' to use individual SSE transport for each client (legacy behavior)
USE_MULTIPLEXING_SSE=false
# Rate Limiting Configuration
RATE_LIMIT_WINDOW_MS=900000 # Time window for rate limiting in milliseconds (e.g., 900000 for 15 minutes)
RATE_LIMIT_MAX_REQUESTS=100 # Maximum number of requests allowed per window per IP
RATE_LIMIT_SSE_MAX=5 # Maximum number of SSE connections allowed per minute per IP
RATE_LIMIT_MESSAGES_MAX=30 # Maximum number of messages allowed per minute per IP
DEFAULT_USER_RATE_LIMIT=1000 # Default number of requests allowed per hour for a user
# Security Headers Configuration
# HSTS (HTTP Strict Transport Security) max-age in seconds. Default is 1 year (31536000).
HSTS_MAX_AGE=31536000
# Set to 'true' to only report Content Security Policy (CSP) violations without enforcing them.
# In development, you might want to set this to 'true'.
CSP_REPORT_ONLY=false
# URL where CSP violation reports will be sent.
CSP_REPORT_URI=https://your-domain.com/csp-report
# Environment Configuration
# Set to 'development' or 'production'.
NODE_ENV=development
# Set to 'true' to disable HSTS, useful for local development without HTTPS.
DISABLE_HSTS=true