.env.example

# Cartesi MCP Server — copy to `.env` and adjust.
# See `src/core/config.py` for defaults and field names.

# Application
APP_NAME=Cartesi Knowledge MCP Server
APP_ENV=development
APP_HOST=0.0.0.0
APP_PORT=8000
APP_LOG_LEVEL=INFO

# Public base URL for MCP HTTP (must match host/port clients use; path is usually /mcp)
MCP_BASE_URL=http://localhost:8000/mcp

# Read-only PostgreSQL URL (asyncpg). Use a DB user with SELECT-only privileges in production.
# `postgres://` is normalized to `postgresql+asyncpg://`, and `sslmode` is converted to `ssl`.
# Example: postgresql+asyncpg://mcp_reader:CHANGE_ME@localhost:5432/cartesi_mcp
DATABASE_URL=postgresql+asyncpg://postgres:postgres@localhost:5432/mcp_server

# Pagination limits for list/search tools
DEFAULT_PAGE_SIZE=10
MAX_PAGE_SIZE=50

# Comma-separated bare hostnames appended to the DNS-rebinding allowlist (localhost entries are always included).
# Example: server.mcp.mugen.builders,server.mcp.mugen.builders:*
EXTRA_ALLOWED_HOSTS=

# Comma-separated full origin URLs appended to the CORS/origin allowlist (localhost entries are always included).
# Example: https://server.mcp.mugen.builders,https://cartesi-mcp.idogwuchinonso.com
EXTRA_ALLOWED_ORIGINS=

# CREATE USER mcp_reader WITH PASSWORD 'mypassword';
# CREATE USER mcp_writer WITH PASSWORD 'mypassword';

# CREATE DATABASE mcp_db;

# GRANT ALL PRIVILEGES ON DATABASE mcp_db TO mcp_writer;
# GRANT USAGE ON SCHEMA public TO mcp_reader;

# ALTER DEFAULT PRIVILEGES IN SCHEMA public
# GRANT SELECT ON TABLES TO mcp_reader;