# Oura MCP Server Configuration
# =============================================================================
# FOR LOCAL DEVELOPMENT (Personal Access Token)
# =============================================================================
# Simple authentication using a Personal Access Token
# Get your token from: https://cloud.ouraring.com/personal-access-tokens
OURA_ACCESS_TOKEN=your_personal_access_token_here
# =============================================================================
# FOR PRODUCTION (OAuth2 via FastMCP Cloud)
# =============================================================================
# These are ONLY needed when deploying to FastMCP Cloud
# Set these in your FastMCP Cloud dashboard under Settings > Environment
# Your Oura OAuth App Credentials (from https://cloud.ouraring.com/oauth/applications)
OURA_CLIENT_ID=your_client_id_here
OURA_CLIENT_SECRET=your_client_secret_here
# Your FastMCP Cloud deployment URL (without /mcp - handled automatically)
# Example: https://oura-mcp.fastmcp.app
DEPLOYED_URL=https://your-app-name.fastmcp.app
# JWT signing key for FastMCP's internal tokens (REQUIRED for production)
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
# IMPORTANT: Keep this stable! Changing it invalidates all user tokens
JWT_SIGNING_KEY=your_generated_jwt_signing_key_here
# =============================================================================
# NOTES
# =============================================================================
#
# Local Development:
# - Only set OURA_ACCESS_TOKEN
# - Use Personal Access Token (PAT) for simplicity
# - No OAuth configuration needed
#
# Production (FastMCP Cloud):
# - Set OURA_CLIENT_ID, OURA_CLIENT_SECRET, DEPLOYED_URL, and JWT_SIGNING_KEY
# - Don't set OURA_ACCESS_TOKEN
# - OAuth flow handles authentication automatically
# - Users authenticate through Oura's login page
# - Keep JWT_SIGNING_KEY stable across deployments!
#
# Token File:
# - .oura_tokens.json is auto-generated for local OAuth testing
# - Add it to .gitignore (already done)
# - NOT used in production (FastMCP Cloud manages tokens)