.env.example

# Allure TestOps MCP Server Configuration
# Copy this file to .env and fill in your actual values.
#
# SETUP MODES:
# - Per-User: Each person runs their own MCP server with ALLURE_TOKEN in their Claude config env.
# - Shared Server: One server for the team. Leave ALLURE_TOKEN empty; each user provides their own token in Claude config.

# --- Allure TestOps ---

# Base URL of your Allure TestOps instance (http or https).
# Example: https://allure.example.com or https://allure.cloud
ALLURE_BASE_URL=https://your-allure-domain.com

# Allure API token (OPTIONAL).
# For shared server setup: leave empty. Each user will provide their own token in Claude Desktop config.
# For fallback/default token: Get it from Allure TestOps > Settings > API Tokens > Create New Token
# ALLURE_TOKEN=your_allure_api_token_here

# HTTP timeout for outbound Allure requests, in seconds. Range: 1..600.
REQUEST_TIMEOUT=30

# --- MCP server ---

# TCP port the server listens on. Accepts "3000" or ":3000".
PORT=3000

# Log level: DEBUG, INFO, WARN, ERROR.
LOG_LEVEL=INFO

# Named user tokens (preferred). Format: "name:token,name:token,..."
# Each user gets their own bearer token; requests are logged under the user's name.
# Example: MCP_AUTH_TOKENS=alice:abc123,bob:xyz789
MCP_AUTH_TOKENS=

# Legacy single-token fallback (used as user "default" when MCP_AUTH_TOKENS is empty).
# Ignored if MCP_AUTH_TOKENS is set.
MCP_AUTH_TOKEN=

# CORS Access-Control-Allow-Origin value. Use "*" only for local development.
# For production, set to the exact origin of your MCP client (e.g. https://client.example.com).
# Leave empty to disable CORS headers entirely.
CORS_ALLOWED_ORIGIN=*

# --- Audit log ---

# Directory where daily audit JSONL files are written.
# Each file is named audit-YYYY-MM-DD.jsonl.
AUDIT_LOG_PATH=audit

# Number of days to keep audit files before automatic deletion. Default: 30.
AUDIT_RETENTION_DAYS=30