# ── Transport ──────────────────────────────────────────────────────────
# MCP_TRANSPORT_TYPE=stdio          # stdio | http (default: stdio)
# MCP_HTTP_PORT=3010                # HTTP port (default: 3010)
# MCP_HTTP_HOST=localhost           # HTTP host (default: localhost)
# MCP_HTTP_ENDPOINT_PATH=/mcp      # HTTP endpoint path (default: /mcp)
# MCP_HTTP_MAX_BODY_BYTES=1048576  # Max request body bytes; 413 over limit, 0 disables (default: 1048576)
# MCP_PUBLIC_URL=                  # Public origin behind a TLS-terminating proxy (e.g. https://mcp.example.com)

# ── Auth ──────────────────────────────────────────────────────────────
# MCP_AUTH_MODE=none                # none | jwt | oauth (default: none)
# MCP_AUTH_SECRET_KEY=              # JWT secret (required for jwt mode)

# ── Storage ───────────────────────────────────────────────────────────
# STORAGE_PROVIDER_TYPE=in-memory   # in-memory | filesystem | supabase | cloudflare-r2 | cloudflare-kv | cloudflare-d1

# ── Session ──────────────────────────────────────────────────────────
# MCP_SESSION_MODE=stateful         # stateful | stateless (default: stateful)

# ── Memory ───────────────────────────────────────────────────────────
# MCP_GC_PRESSURE_INTERVAL_MS=0     # Opt-in forced Bun.gc(true) interval, ms (Bun only). Drains old-gen backlog
                                    # under sustained HTTP load (issue #50). Try 60000 if RSS grows. Default: 0.

# ── Logging ───────────────────────────────────────────────────────────
# MCP_LOG_LEVEL=info                # debug | info | notice | warning | error

# ── Telemetry ─────────────────────────────────────────────────────────
# OTEL_ENABLED=false                          # Enable OpenTelemetry (default: false)
# OTEL_EXPORTER_OTLP_ENDPOINT=               # OTLP endpoint URL (e.g., http://localhost:4318)

# ── Server-specific ──────────────────────────────────────────────────
# DEVOPS_STATUS_CACHE_TTL_MS=60000           # Statuspage cache TTL in ms (default: 60000)
# DEVOPS_STATUS_FETCH_TIMEOUT_MS=8000        # Statuspage request timeout in ms (default: 8000)
# DEVOPS_STATUS_CERT_TIMEOUT_MS=5000         # Default timeout_ms for devops_check_certs in ms; explicit
#                                     # timeout_ms input wins (default: 5000)
# DEVOPS_STATUS_DNS_TIMEOUT_MS=3000          # Default timeout_ms for devops_check_dns in ms; explicit
#                                     # timeout_ms input wins (default: 3000)
# DEVOPS_STATUS_ALLOW_PRIVATE_TARGETS=false  # When true, disables SSRF guards for user-supplied URLs and
#                                     # domains. For trusted local/intranet deployments only.
#                                     # Default: false (guards enabled — required for hosted deployments)
# DEVOPS_STATUS_DISABLE_ACTIVE_PROBES=false  # When true, omits the arbitrary-target probe tools
#                                     # (devops_check_dns, devops_check_certs) from the registered tool
#                                     # surface; the five vendor-registry/incident tools remain. For
#                                     # shared/public multi-tenant instances. Default: false (both registered)