secret.env.example

# Copy this file to secret.env at the repository root and fill in your values.
# secret.env is gitignored and will not be committed.

# --- OAuth (recommended for stdio / MCP client development) ---
# Create an OAuth client at https://app.transcend.io/admin/oauth-clients
# Choose an available localhost port number, then register: http://127.0.0.1:{port}/callback (use 127.0.0.1, not localhost; {port} is the number you chose)
TRANSCEND_OAUTH_CLIENT_ID=
TRANSCEND_OAUTH_CLIENT_SECRET=
TRANSCEND_OAUTH_REDIRECT_PORT=4567
# TRANSCEND_OAUTH_REDIRECT_HOST=127.0.0.1

# --- API key (alternative for stdio, or for HTTP transport) ---
# When set alongside OAuth client ID, API key takes precedence and disables OAuth.
TRANSCEND_API_KEY=

# Optional overrides (omit to use production Transcend defaults)
# TRANSCEND_API_URL=https://api.transcend.io
# Sticky customer-ingress host override (DSR create / Sombra REST). When unset, MCP lazy-resolves
# organization.sombra.customerUrl. Local customer ingress is often port 5046—not external 5047.
# SOMBRA_URL=https://multi-tenant.sombra.transcend.io
# Optional self-hosted customer-ingress API key (STS). Sent as X-Sombra-Authorization.
# SOMBRA_CUSTOMER_KEY=
# Test-only URL overrides (dashboard / OAuth issuer). Unset or any value other than 1 is treated as disabled.
# ALLOW_TEST_OVERRIDES=1
# TRANSCEND_DASHBOARD_URL=https://app.transcend.io
# TRANSCEND_OAUTH_ISSUER=https://api.transcend.io  # requires ALLOW_TEST_OVERRIDES=1; production auto-detects region