Secure MCP Server

# Test Environment Configuration NODE_ENV=test # Server Configuration PORT=3001 HOST=127.0.0.1 # Database Configuration (Test containers will override these) DATABASE_URL=postgresql://test:test@localhost:5432/secure_mcp_test DATABASE_SSL=false DATABASE_POOL_MIN=1 DATABASE_POOL_MAX=5 DATABASE_TIMEOUT=5000 # Redis Configuration (Test containers will override these) REDIS_URL=redis://localhost:6379/1 REDIS_DB=1 REDIS_CONNECT_TIMEOUT=5000 REDIS_COMMAND_TIMEOUT=2000 REDIS_RETRY_DELAY_ON_FAILURE=100 REDIS_MAX_RETRY_DELAY=1000 # Vault Configuration (Test containers will override these) VAULT_URL=http://localhost:8200 VAULT_TOKEN=test-token VAULT_KV_MOUNT=secret VAULT_TIMEOUT=5000 # JWT Configuration JWT_SECRET=test-jwt-secret-must-be-at-least-32-characters-long JWT_ACCESS_EXPIRES_IN=15m JWT_REFRESH_EXPIRES_IN=7d JWT_ISSUER=secure-mcp-server JWT_AUDIENCE=secure-mcp-client # MFA Configuration MFA_ISSUER=Secure MCP Server Test MFA_WINDOW=2 # SSO Configuration SAML_ENABLED=false # Rate Limiting RATE_LIMIT_WINDOW_MS=60000 RATE_LIMIT_MAX_REQUESTS=1000 RATE_LIMIT_SKIP_SUCCESSFUL=false RATE_LIMIT_SKIP_FAILED=false # CORS Configuration CORS_ORIGINS=http://localhost:3000,http://localhost:3001 CORS_CREDENTIALS=true CORS_MAX_AGE=86400 # Security Configuration SECURITY_FORCE_HTTPS=false SECURITY_HSTS_MAX_AGE=31536000 SECURITY_FRAME_OPTIONS=DENY # Logging Configuration LOG_LEVEL=warn LOG_FORMAT=json LOG_REDACT_SENSITIVE=true # Monitoring Configuration METRICS_ENABLED=false METRICS_PORT=9091 METRICS_PATH=/metrics TRACING_ENABLED=false TRACING_SERVICE_NAME=secure-mcp-server-test # WebSocket Configuration WS_PING_TIMEOUT=30000 WS_PING_INTERVAL=10000 WS_MAX_CONNECTIONS=100 WS_MAX_MESSAGE_SIZE=1048576 # MCP Protocol Configuration MCP_PROTOCOL_VERSION=2024-11-05 MCP_MAX_TOOLS=50 MCP_MAX_RESOURCES=100 MCP_TIMEOUT=10000 MCP_RATE_LIMIT_PER_CONNECTION=1000 # Clustering Configuration CLUSTERING_ENABLED=false CLUSTERING_WORKERS=1 # Health Check Configuration HEALTH_CHECK_TIMEOUT=2000 HEALTH_CHECK_INTERVAL=10000 # Encryption Configuration ENCRYPTION_ALGORITHM=aes-256-gcm ENCRYPTION_KEY_DERIVATION=pbkdf2 ENCRYPTION_ITERATIONS=10000 # Session Configuration SESSION_SECRET=test-session-secret-must-be-at-least-32-characters-long SESSION_TIMEOUT=1800000 SESSION_COOKIE_SECURE=false SESSION_COOKIE_HTTP_ONLY=true SESSION_COOKIE_SAME_SITE=strict