# public origin and private listener
EXTERNAL_URL=https://mcp.example.com
LISTEN=127.0.0.1:3000
TRUSTED_PROXIES=127.0.0.1
# optional: override the default ~/.local/share/colab-mcp private state directory
# DATA_PATH=/var/lib/colab-mcp

# owner login through your identity provider
OIDC_CONFIGURATION_URL=https://identity.example.com/.well-known/openid-configuration
OIDC_CLIENT_ID=colab-mcp
OIDC_CLIENT_SECRET=replace-me
MCP_ALLOWED_SUBJECT=replace-with-your-provider-subject

# google web-app client; callback: https://mcp.example.com/.auth/colab/callback
COLAB_GOOGLE_CLIENT_ID=replace-me.apps.googleusercontent.com
COLAB_GOOGLE_CLIENT_SECRET=replace-me
# optional: pin the google account that may be connected
# COLAB_GOOGLE_ACCOUNT=owner@example.com