# MCP Server — port 4007 PORT=4007 HOST=0.0.0.0 LOG_LEVEL=info # Upstream services PLATFORM_SERVICE_URL=http://localhost:4003 EXTRACTION_SERVICE_URL=http://localhost:4005 # Auth — same JWT_SECRET as platform-service (tokens issued there are validated here) JWT_SECRET=change-me-in-production # Optional: AKV resolution AZURE_KEYVAULT_URL=