.env.example

# =============================================================================
# AnythingMCP — Environment Variables
# =============================================================================
# The recommended way to generate this file is `./setup.sh`, which writes a
# fully-populated `.env` to the project root (where docker-compose.yml lives).
#
# For manual setup: copy this file to `.env` in the project root, replace the
# `change-me-…` values with secure secrets, then run `docker compose up -d`.
# For local development without Docker, copy it to `packages/backend/.env`.
# =============================================================================

# ── General ──────────────────────────────────────────────────────────────────
NODE_ENV=production
# Internal backend port inside the container. The host-published port is set
# separately via BACKEND_PORT (see the Ports section) — leave this at 4000.
PORT=4000

# Compose project name — also the prefix for the network, volumes and container
# names (amcp-app, amcp-postgres, …). Override it to run more than one
# AnythingMCP stack on the same host without name collisions.
# COMPOSE_PROJECT_NAME=amcp

# ── Database ─────────────────────────────────────────────────────────────────
POSTGRES_PASSWORD=change-me-in-production
DATABASE_URL=postgresql://amcp:${POSTGRES_PASSWORD}@postgres:5432/anythingmcp

# ── Redis (optional) ─────────────────────────────────────────────────────────
# Redis enables response caching and rate limiting. The app works without it.
# REDIS_URL=redis://redis:6379

# ── Security ─────────────────────────────────────────────────────────────────
# JWT secret for API authentication (min 32 characters)
JWT_SECRET=change-me-in-production-min-32-chars

# AES-256-GCM encryption key for stored credentials (exactly 32 characters)
ENCRYPTION_KEY=change-me-in-production-exactly-32

# HMAC secret for signed cookies (OAuth callback flow). Optional — falls back
# to JWT_SECRET if unset. Set it separately for defense in depth (rotate it
# independently from JWT_SECRET).
# COOKIE_SECRET=change-me-in-production-min-32-chars

# Postgres Row-Level Security — database-enforced tenant isolation on top of the
# app-layer checks. OFF by default; this is a staged rollout, not a flip switch:
# the DATABASE_URL role must be NON-superuser, query call sites must run through
# tenantTx, and the policies must be applied. See
# docs/operations/row-level-security.md before enabling.
# ENABLE_RLS=false

# ── Frontend ─────────────────────────────────────────────────────────────────
FRONTEND_URL=http://localhost:3000
NEXT_PUBLIC_API_URL=http://localhost:4000
NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=change-me-in-production

# ── CORS ─────────────────────────────────────────────────────────────────────
CORS_ORIGIN=http://localhost:3000

# ── Registration ──────────────────────────────────────────────────────────────
# When false (default), only the first user can self-register via the UI.
# All other users must be invited by an admin. Set to true to allow open registration.
ALLOW_OPEN_REGISTRATION=false

# ── Catalog auto-sync ─────────────────────────────────────────────────────────
# On startup, automatically applies "safe" catalog updates (tool
# description/parameter fixes — no endpoint or tool add/remove changes) to
# connectors installed from the catalog, so adapter improvements reach existing
# connectors without manual action. Structural updates are left for explicit
# review. Set to false to disable and pin installed connectors to their tools.
# CATALOG_AUTOSYNC=true

# ── MCP Server Auth (for external MCP clients like Claude Desktop) ───────────
# Auth mode: none | legacy | oauth2 | both
#   none    — No authentication (not recommended for production)
#   legacy  — Static Bearer Token or API Key (set MCP_BEARER_TOKEN / MCP_API_KEY)
#   oauth2  — OAuth 2.0 Authorization Code (PKCE) + Client Credentials
#   both    — OAuth 2.0 + Legacy (accepts either)
MCP_AUTH_MODE=oauth2

# Legacy auth tokens (used when MCP_AUTH_MODE=legacy or both)
# MCP_BEARER_TOKEN=your-secret-token
# MCP_API_KEY=your-api-key

# Server URL for OAuth2 redirects and metadata endpoints
SERVER_URL=http://localhost:4000

# ── MCP Rate Limiting ──────────────────────────────────────────────────────
# Max requests per minute per client (by API key or IP). Only enforced when Redis is available.
MCP_RATE_LIMIT_PER_MINUTE=60

# ── MCP Stateful Sessions (optional) ─────────────────────────────────────────
# When true, the per-server MCP endpoint keeps a live session (with an SSE
# channel) per connected client and PUSHES notifications/tools/list_changed when
# a connector or its tool surface changes — so clients like ChatGPT/Claude pick
# up new tools without a manual refresh. Default (false) is stateless: each
# request is independent and clients only see tool changes on reconnect.
# MCP_STATEFUL_SESSIONS=false
# Streamable-HTTP response framing. Default (unset/false) = SSE-framed
# responses (text/event-stream), the spec-standard required by some clients
# (e.g. Microsoft Copilot Studio). Set true to force application/json responses.
# MCP_STREAMABLE_JSON_RESPONSE=false
# Idle session eviction (minutes) and a global cap on concurrent sessions.
# MCP_SESSION_IDLE_MIN=30
# MCP_MAX_SESSIONS=500

# ── Knowledge Graph — AI features (optional) ─────────────────────────────────
# Global switch + API key for LLM graph enrichment / skill generation. Without
# these, all AI features stay off regardless of per-workspace toggles.
# KG_LLM_ENABLED=false
# KG_LLM_MODEL=gpt-4o-mini
# OPENAI_API_KEY=          # or OPENROUTER_API_KEY / ANTHROPIC_API_KEY
#
# Scheduled AI extension (cloud cron): periodically extends the graph + skills
# from captured user intents. Off unless ALL of: this flag is true, the cron
# runs (POST /api/cron/kg-discovery with CRON_SECRET), and the workspace turned
# on "Scheduled AI extension". Cost controls: per-org cooldown + per-run cap, and
# it only spends when the graph changed / new intents arrived.
# KG_LLM_CRON_ENABLED=false
# KG_LLM_MIN_INTERVAL_HOURS=24   # per-workspace cooldown between AI passes
# KG_LLM_CRON_MAX_ORGS=20        # max workspaces given an AI pass per cron run
# Batch mode (Anthropic only): the cron submits the AI passes as a Message Batch
# (~50% cheaper, processed asynchronously) and applies the results on a later
# run. Off by default = synchronous. Requires KG_LLM_PROVIDER=anthropic.
# KG_LLM_BATCH=false
#
# Provider/model: KG_LLM_PROVIDER = openai (default) | openrouter | anthropic.
# For GDPR/EU, prefer an EU-resident, no-training, zero-retention provider (e.g.
# Azure OpenAI EU, or Claude via AWS Bedrock EU). Anthropic default model is now
# claude-haiku-4-5. OpenAI default is gpt-4o-mini.
#
# PII minimization: captured intents are scrubbed (emails, phones, ids, IBAN,
# cards) before being sent to the LLM for skill generation. Set to false to send
# raw intents (not recommended when personal data may appear in requests).
# KG_LLM_REDACT_INTENTS=true

# ── Proxy / Web-Unblocker (optional) ─────────────────────────────────────────
# When set, tools whose `use_proxy` flag is on route their outbound HTTP
# request through this proxy. Use a plain rotating proxy for IP/geo/rate-limit
# cases, or a "web unblocker" (e.g. Zyte API proxy mode) for anti-bot targets
# like Akamai / Cloudflare / DataDome.
#
#   Zyte API proxy mode:  http://<ZYTE_API_KEY>:@api.zyte.com:8011
#   Generic proxy:        http://user:pass@host:port
#
# If unset, the feature is off everywhere: tools that opted in simply make a
# direct request. Per-tool opt-in is a UI checkbox (shown only when this is
# set) plus the adapter spec's `useProxy` field.
# CONNECTOR_PROXY_URL=

# Cloud only: default hourly cap on proxy-routed tool calls PER WORKSPACE.
# Override per workspace by setting organizations.proxy_rate_limit in the DB
# (admin-only; there is no API to change it). Defaults to 100 when unset.
# PROXY_RATE_LIMIT_DEFAULT=100

# ── Usage cost estimate (Analytics) ──────────────────────────────────────────
# The Analytics page shows a volume-based cost estimate (there are no LLM
# tokens): est = tool_calls × COST_PER_CALL_MICROS + proxy_calls ×
# COST_PER_PROXY_CALL_MICROS. Values are in micros (millionths of a currency
# unit). Both default to 0, so the estimate shows 0 until an operator sets rates.
# COST_PER_CALL_MICROS=0
# COST_PER_PROXY_CALL_MICROS=0

# ── Operator Analytics (cloud build only — leave empty on self-hosted) ──────
# Loads Google Tag Manager + a Consent Mode v2 cookie banner. Self-hosted
# builds must leave both empty so no tracking is shipped to community users.
#
# GTM_ID         — Google Tag Manager container ID (e.g. GTM-XXXXXXX).
# COOKIE_DOMAIN  — Domain attribute for the consent cookie. Set to a parent
#                  domain (e.g. .anythingmcp.com) to share consent with the
#                  marketing site running on the same parent domain. Leave
#                  unset for host-only scope.
# GTM_ID=
# COOKIE_DOMAIN=

# ── Reverse Proxy (Caddy) ────────────────────────────────────────────────────
# Uncomment to enable Caddy reverse proxy with automatic HTTPS (Let's Encrypt).
# Requires a Caddyfile in the project root (setup.sh generates it automatically).
# COMPOSE_PROFILES=proxy
# DOMAIN=example.com
# ACME_EMAIL=admin@example.com
# APP_BIND_IP=127.0.0.1