.env.example

# ======================================================================
# For local testing copy this file at kernel-mcp-server/.env.local
# Values can be found at 1pass > DevEnvVars > MCP section, copy and past at .env.local
# ======================================================================

# Clerk Configuration
NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_test_<x>
CLERK_SECRET_KEY=sk_test_<x>

# OAuth Configuration
NEXT_PUBLIC_CLERK_DOMAIN=<x>.clerk.accounts.dev

# API Configuration - Only needed to set the Kernel SDK base url
API_BASE_URL=<x>

# Public origin of this MCP server. The Managed Auth MCP App connects only to
# the narrowly scoped same-origin relay. Local development: http://localhost:3002
MANAGED_AUTH_APP_ORIGIN=https://mcp.onkernel.com

# Mintlify API Configuration - Only needed for the search_docs tool call
MINTLIFY_ASSISTANT_API_TOKEN=mint_dsc_<x>
MINTLIFY_DOMAIN=<x>

# Optional MCP toolset gating. Comma-separated values.
# Example: api_keys hides manage_api_keys so deployments can opt out of key management.
# Supported: apps, api_keys, auth_connections, browser_pools, browsers, computer, docs, extensions, playwright, profiles, projects, proxies, replays, shell
# KERNEL_MCP_DISABLED_TOOLSETS=api_keys

# Redis Configuration
REDIS_URL=<x> # redis://127.0.0.1:6379
# REDIS_TLS_SERVER_NAME=<x> # optional; requires REDIS_URL to use rediss://

# PostHog MCP analytics. Unset disables capture entirely.
POSTHOG_PROJECT_TOKEN=phc_<x>
POSTHOG_HOST=https://us.i.posthog.com

# OAuth Client IDs
KERNEL_CLI_PROD_CLIENT_ID=<x>
KERNEL_CLI_STAGING_CLIENT_ID=<x>
KERNEL_CLI_DEV_CLIENT_ID=<x>

# Optional comma-separated allowlist for known legacy OAuth clients that cannot use S256 PKCE.
# OAUTH_LEGACY_NON_PKCE_CLIENT_IDS=<client_id>