# Network
MCP_HOST=0.0.0.0
MCP_PORT=3000
MCP_ENDPOINT=/mcp
MCP_PUBLIC_URL=https://mcp.example.com
MCP_TRUST_PROXY_HOPS=0

# Static bearer authentication. OAuth can instead use MCP_OAUTH_APPROVAL_KEY.
MCP_AUTH_TOKEN=replace-with-a-long-random-token
MCP_ALLOW_NO_AUTH=false

# Host execution. No sandbox, approval, command allowlist, or path restriction is applied.
MCP_DEFAULT_CWD=/root
MCP_DEFAULT_SHELL=/bin/bash

# Operational limits for transport stability, not permission restrictions.
MCP_MAX_REQUEST_BODY=8mb
MCP_MAX_OUTPUT_BYTES=1048576
MCP_MAX_RETAINED_PROCESS_OUTPUT_BYTES=4194304
MCP_PROCESS_RETENTION_MS=3600000
MCP_MAX_PROCESSES=128
MCP_MAX_FILE_CHUNK_BYTES=1048576
MCP_MAX_EDIT_FILE_BYTES=67108864