Configuration reference
本頁內容尚未翻譯。
| Variable | Required | Meaning |
|---|---|---|
BASE_URL |
yes | Public URL, e.g. https://mcp.example.com. Must be https unless it is localhost. |
GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET |
yes | Web OAuth client |
ALLOWED_USERS |
yes | Comma-separated primary Google addresses allowed to use the server |
JWT_SIGNING_KEY |
yes | Signs FastMCP session tokens (≥32 chars) |
STORAGE_ENCRYPTION_KEY |
yes | Fernet key for the OAuth client store |
TOKEN_ENCRYPTION_KEY |
yes | Fernet key for stored Gmail refresh tokens |
STATE_SECRET |
yes | HMAC key for single-use linking state (≥32 chars) |
DATA_DIR |
no | Default /var/lib/surfski; /data in the container |
TOKEN_ENCRYPTION_KEYS |
no | Per-owner Fernet keys owner=key,owner=key |
ALLOWED_CLIENT_REDIRECT_URIS |
no | MCP client redirect allowlist. Defaults to Claude’s callbacks, plus localhost when BASE_URL is localhost |
RATE_LIMIT_PER_MINUTE |
no | Tool calls per owner per minute (default 60) |
LOG_LEVEL, HOST, PORT |
no | Logging and bind address |
Synced from rayhu/surfski/README.md@e4c5de0. The repository is the source of truth.