# ---------------------------------------------------------------------------
# Stdio mode (single-user, local)
# ---------------------------------------------------------------------------
# BOUNCIE_ACCESS_TOKEN=your-access-token

# ---------------------------------------------------------------------------
# HTTP mode (multi-user, centrally hosted)
# ---------------------------------------------------------------------------
BOUNCIE_CLIENT_ID=your-client-id
BOUNCIE_CLIENT_SECRET=your-client-secret

# Public URL of this server. The redirect URL registered on your Bouncie
# app must be {PUBLIC_URL}/callback.
PUBLIC_URL=https://bouncie.yourdomain.com

# Optional
TOKEN_TTL_HOURS=24
# PORT=3000

# Key material for sealing MCP tokens. Defaults to deriving from
# BOUNCIE_CLIENT_SECRET, which every instance already shares, so multi-instance
# deployments work with no extra configuration.
#
# Set this explicitly if you want token lifetime decoupled from client secret
# rotation: without it, rotating BOUNCIE_CLIENT_SECRET signs everyone out. It
# must be identical on every instance.
# TOKEN_SECRET=