Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| BASE_URL | No | Public-facing URL (used in OAuth callbacks) | http://localhost:8000 |
| LLM_MODEL | No | Anthropic model for SQL generation | claude-sonnet-4-6 |
| SECRET_KEY | Yes | JWT signing secret — use a random 64-char string | |
| CORS_ORIGINS | No | Comma-separated allowed origins for CORS. Must be absolute URLs — wildcards (*) are rejected | BASE_URL |
| DATABASE_URL | Yes | PostgreSQL DSN — set automatically by docker-compose; only needed for local (non-Docker) dev | |
| ENCRYPTION_KEY | Yes | Fernet AES key for DB credentials — minimum 32 characters; full key consumed via BLAKE2b | |
| ENTRA_GRAPH_URL | No | Microsoft Graph API base URL | https://graph.microsoft.com/v1.0 |
| ANTHROPIC_API_KEY | No | Required for /query/ NL query endpoint | |
| POSTGRES_PASSWORD | Yes | PostgreSQL password — used by docker-compose for both the db service and DATABASE_URL | |
| LLM_MAX_TOKENS_SQL | No | Max tokens for SQL generation | 1024 |
| ENTRA_AUTHORITY_URL | No | Microsoft identity platform base URL | https://login.microsoftonline.com |
| LLM_MAX_TOKENS_SUMMARY | No | Max tokens for result summarization | 500 |
| OAUTH_CODE_TTL_MINUTES | No | OAuth authorization code validity window | 5 |
| FILESYSTEM_ALLOWED_DIRS | No | Comma-separated directories the MCP filesystem tools may access. When empty, no filesystem tools are exposed | |
| OAUTH_STATE_TTL_MINUTES | No | OAuth PKCE state validity window — increase for high-latency SSO providers | 10 |
| REFRESH_TOKEN_EXPIRE_DAYS | No | OAuth refresh token lifetime | 30 |
| ACCESS_TOKEN_EXPIRE_MINUTES | No | JWT access token lifetime | 15 |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |