# Griphook MCP Server Configuration
# ============================================================================
# Required
# ============================================================================
# STRATO Backend API URL
STRATO_API_BASE_URL=https://buildtest.mercata-testnet.blockapps.net/api
# ============================================================================
# Authentication
# ============================================================================
# OAuth configuration for browser login
# Run `npm run login` to authenticate via browser, then start the server.
#OAUTH_CLIENT_ID=localhost
#OAUTH_CLIENT_SECRET=your-client-secret
#OPENID_DISCOVERY_URL=https://keycloak.blockapps.net/auth/realms/mercata/.well-known/openid-configuration
# ============================================================================
# Optional
# ============================================================================
# HTTP timeout in milliseconds
#STRATO_HTTP_TIMEOUT_MS=15000
# HTTP transport configuration
#GRIPHOOK_HTTP_ENABLED=true
#GRIPHOOK_HTTP_HOST=127.0.0.1
#GRIPHOOK_HTTP_PORT=3005
#GRIPHOOK_HTTP_PATH=/mcp
# ============================================================================
# Hosted Mode (Multi-user deployment)
# ============================================================================
# When GRIPHOOK_PUBLIC_URL is set, the server runs in hosted mode:
# - Requires Bearer token authentication on all MCP endpoints
# - Exposes /.well-known/oauth-protected-resource for RFC 9728 OAuth discovery
# - Provides /login page for users to get Bearer tokens
# - Uses OAUTH_CLIENT_ID/SECRET for the login flow (add redirect URI to Keycloak)
#
# For local development, leave this unset.
# For production deployment, set this to your public URL.
#GRIPHOOK_PUBLIC_URL=https://griphook-testnet.strato.nexus
