.env.example

# GitLab API Configuration
GITLAB_API_URL=https://gitlab.com
GITLAB_TOKEN=your-gitlab-personal-access-token-here
# Optional: repository file API payload encoding (text or base64). Default: text
# GITLAB_REPO_FILE_ENCODING=text

# CI/CD Job Token (alternative to Personal Access Token, for use in GitLab CI pipelines)
# When set, the token is sent as the JOB-TOKEN header instead of Authorization: Bearer
# GITLAB_JOB_TOKEN=$CI_JOB_TOKEN

# OAuth Configuration (alternative to Personal Access Token)
# GITLAB_USE_OAUTH=true
# GITLAB_OAUTH_CLIENT_ID=your-oauth-client-id
# GITLAB_OAUTH_CLIENT_SECRET=your-oauth-client-secret  # Required for Confidential apps only
# GITLAB_OAUTH_REDIRECT_URI=http://127.0.0.1:8888/callback
# GITLAB_OAUTH_TOKEN_PATH=~/.gitlab-mcp-token.json

# Test Configuration (for integration tests)
GITLAB_TOKEN_TEST=your-test-token-here
TEST_PROJECT_ID=your-test-project-id
ISSUE_IID=1


# MCP Transport Mode (Optional)
# Description: 
# When multiple transport modes are enabled, the server will use the following priority:
# 1. **Streamable HTTP** (if `STREAMABLE_HTTP=true`) - Highest priority
# 2. **SSE** (if `SSE=true` and `STREAMABLE_HTTP!=true`) - Medium priority  
# 3. **Stdio** (if `SSE!=true` and `STREAMABLE_HTTP!=true`)
SSE=true
STREAMABLE_HTTP=false

# MCP Server Host With SSE Transport and Streamable Http Transport
HOST=127.0.0.1

# Proxy Configuration (optional)
HTTP_PROXY=
HTTPS_PROXY=
NO_PROXY=localhost,127.0.0.1

# Remote Authorization (minimal configuration)
# SSE transport cannot be used with REMOTE_AUTHORIZATION now
STREAMABLE_HTTP=true
REMOTE_AUTHORIZATION=true
GITLAB_API_URL="https://gitlab.com/api/v4"

# MCP OAuth — server-side GitLab OAuth proxy for Claude.ai integration
# Enables the MCP spec OAuth flow: Claude.ai drives the browser auth,
# users log in with their GitLab account, tokens are validated per-session.
# Requires STREAMABLE_HTTP=true. Incompatible with SSE.
# Requires a pre-registered GitLab OAuth application (Admin > Applications)
# with scopes: api, read_api, read_user — GitLab DCR limits dynamic apps
# to the "mcp" scope which is insufficient for API calls.
# GITLAB_MCP_OAUTH=true
# GITLAB_OAUTH_APP_ID=your-gitlab-oauth-app-client-id
# MCP_SERVER_URL=https://your-mcp-server.example.com
# GITLAB_API_URL=https://gitlab.example.com/api/v4
# STREAMABLE_HTTP=true
# MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL=true  # local dev only (HTTP)
# Comma-separated list of GitLab scopes to request during OAuth.
# Overrides the default (api) and the read-only default (read_api).
# The pre-registered OAuth application must be configured with at least these scopes.
# GITLAB_OAUTH_SCOPES=api,read_user