.env.example

NANGO_BASE_URL=https://api.nango.dev
NANGO_ENVIRONMENT=default
NANGO_SECRET_KEY=replace_with_your_nango_environment_secret_key

# Multi-environment example:
# NANGO_MCP_ENVIRONMENTS=dev,prod
# NANGO_SECRET_KEY_DEV=replace_with_dev_secret
# NANGO_SECRET_KEY_PROD=replace_with_prod_secret
# NANGO_MCP_ENVIRONMENT_ALIASES_PROD=live,production

# Optional:
# NANGO_MCP_REQUEST_TIMEOUT=20
# NANGO_MCP_METADATA_NAMESPACE=nango_mcp
# NANGO_MCP_READ_ONLY=false
# NANGO_MCP_TRANSPORT=stdio
# NANGO_MCP_ARTIFACT_ROOT=/secure/path/to/nango-mcp-artifacts
# NANGO_MCP_ARTIFACT_MAX_BYTES=52428800
# NANGO_MCP_ARTIFACT_TTL_SECONDS=86400
# NANGO_MCP_ENVIRONMENT_MAX_CONCURRENCY=4
# NANGO_MCP_RATE_LIMIT_MAX_ATTEMPTS=4

# Optional authenticated Streamable HTTP mode (static bearer policy):
# NANGO_MCP_TRANSPORT=http
# NANGO_MCP_HTTP_HOST=127.0.0.1
# NANGO_MCP_HTTP_PORT=3000
# NANGO_MCP_AUTH_MODE=static
# NANGO_MCP_REQUEST_STATE_KEYS=replace_with_at_least_32_random_bytes
# NANGO_MCP_TOKENS={"sha256_of_nangomcp1_token":{"label":"local-agent","scopes":["default"]}}

# OAuth resource-server mode uses an external authorization server:
# NANGO_MCP_AUTH_MODE=oauth
# NANGO_MCP_OAUTH_ISSUER_URL=https://identity.example.com
# NANGO_MCP_OAUTH_RESOURCE_URL=https://mcp.example.com/mcp
# NANGO_MCP_OAUTH_INTROSPECTION_URL=https://identity.example.com/oauth/introspect
# NANGO_MCP_OAUTH_CLIENT_ID=nango-mcp-resource-server
# NANGO_MCP_OAUTH_CLIENT_SECRET=replace_with_resource_server_secret

# Optional Infisical resolver:
# NANGO_MCP_SECRET_RESOLVER=infisical
# INFISICAL_URL=https://infisical.example.com
# INFISICAL_UNIVERSAL_AUTH_CLIENT_ID=replace_with_client_id
# INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET=replace_with_client_secret
# NANGO_MCP_INFISICAL_PROJECT_ID=replace_with_project_id
# NANGO_MCP_INFISICAL_ENVIRONMENT=prod
# NANGO_MCP_INFISICAL_SECRET_PATH_TEMPLATE=/nango/{environment}
# NANGO_MCP_INFISICAL_SECRET_NAME=NANGO_SECRET_KEY