MCP Vulnerability Management System

# Project settings ENVIRONMENT=development PROJECT_NAME=API Monitoring System VERSION=1.0.0 # Server Configuration PORT=8000 HOST=0.0.0.0 DEBUG=False # Database Configuration DATABASE_URL=sqlite:///./app.db # Security SECRET_KEY=your-secret-key ALGORITHM=HS256 ACCESS_TOKEN_EXPIRE_MINUTES=30 REFRESH_TOKEN_EXPIRE_DAYS=7 # API Keys (Optional) BSI_API_KEY=your-bsi-api-key NVD_API_KEY=your-nvd-api-key # Rate Limiting RATE_LIMIT_REQUESTS=100 RATE_LIMIT_PERIOD=60 # Data Limits MAX_DATA_STORAGE_GB=100 MAX_CONCURRENT_USERS=50 # BSI Configuration BSI_API_URL=https://www.bsi.bund.de/DE/Themen/ITGrundschutz/ITGrundschutzKataloge/Inhalt/_content/m/m01/m01001.html # NVD Configuration NVD_API_URL=https://services.nvd.nist.gov/rest/json/cves/2.0 # MCP Configuration MCP_VERSION=1.0.0 MCP_AUTH_REQUIRED=true # CORS settings CORS_ORIGINS=["*"] # Email settings SMTP_HOST=smtp.example.com SMTP_PORT=587 SMTP_USER=user@example.com SMTP_PASSWORD=your-smtp-password SMTP_FROM=noreply@example.com SMTP_TLS=true # Webhook settings WEBHOOK_TIMEOUT=5 WEBHOOK_RETRY_ATTEMPTS=3 WEBHOOK_RETRY_DELAY=1 # Slack settings SLACK_TIMEOUT=5 SLACK_RETRY_ATTEMPTS=3 # Teams settings TEAMS_TIMEOUT=5 TEAMS_RETRY_ATTEMPTS=3 # Alert settings ALERT_RESPONSE_TIME_WARNING=1.0 ALERT_RESPONSE_TIME_CRITICAL=2.0 ALERT_ERROR_RATE_WARNING=0.05 ALERT_ERROR_RATE_CRITICAL=0.1 ALERT_USAGE_SPIKE_WARNING=0.5 ALERT_USAGE_SPIKE_CRITICAL=1.0 ALERT_UNAUTHORIZED_WARNING=10 ALERT_UNAUTHORIZED_CRITICAL=50 # Logging settings LOG_LEVEL=INFO LOG_FORMAT="%(asctime)s - %(name)s - %(levelname)s - %(message)s"