# MCP Server — port 4007
PORT=4007
HOST=0.0.0.0
LOG_LEVEL=info

# Upstream services
PLATFORM_SERVICE_URL=http://localhost:4003
EXTRACTION_SERVICE_URL=http://localhost:4005

# Auth — same JWT_SECRET as platform-service (tokens issued there are validated here)
JWT_SECRET=change-me-in-production

# Optional: restrict CORS origin (default: unrestricted — set in production)
CORS_ORIGIN=

# Query limits (defaults: max 100, page 20)
QUERY_MAX_LIMIT=100
QUERY_DEFAULT_LIMIT=20

# Optional: AKV resolution
AZURE_KEYVAULT_URL=