example.env•1.31 kB
# Google Cloud Configuration (for deployment)
GCLOUD_PROJECT_ID=gcp-project-id
GCLOUD_REGION=europe-west2
# Server Configuration
PORT=3000
MCP_TRANSPORT=http
# Node Environment
# - development: Enables REST API and Swagger UI (unauthenticated)
# - production: Only MCP endpoints available (authenticated)
NODE_ENV=development
# MCP Authentication Configuration (via @rekog/mcp-nest)
# Currently using Google OAuth provider
# Get credentials from: https://console.cloud.google.com/apis/credentials
MCP_AUTH_CLIENT_ID=your-google-client-id.apps.googleusercontent.com
MCP_AUTH_CLIENT_SECRET=your-google-client-secret
# JWT secret for MCP token signing
MCP_AUTH_JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
# Server URL (base URL for OAuth callbacks)
# Local: http://localhost:3000
# Production: https://your-cloud-run-url.a.run.app
# The callback will be at: {MCP_AUTH_SERVER_URL}/auth/mcp/callback
MCP_AUTH_SERVER_URL=http://localhost:3000
# JWT token expiration (in seconds or time string like "3600s", "1h", "1d")
JWT_EXPIRES_IN=3600
# User Allowlist (comma-separated emails)
# Only these email addresses will be allowed to authenticate to MCP endpoints
# REST API (development only) is not protected by authentication
ALLOWED_EMAILS=user1@example.com,user2@example.com,admin@example.com