Configuration reference

Review the required and optional environment variables for each MCP server transport and authentication mode.

Required settings

Mode Required server settings Controller credential
HTTP request_bearer MCP_TRANSPORT=streamable-http, APPD_ENVIRONMENT Authorization request header
stdio env_bearer MCP_TRANSPORT=stdio, APPD_AUTH_MODE=env_bearer, APPD_ENVIRONMENT, APPD_API_TOKEN Process environment
stdio oauth MCP_TRANSPORT=stdio, APPD_AUTH_MODE=oauth, APPD_ENVIRONMENT, APPD_CLIENT_ID, APPD_CLIENT_SECRET, APPD_CUSTOMER Process environment; token cached in memory

For HTTP, APPD_AUTH_MODE defaults to request_bearer, which requires the MCP client to send the token. For stdio, use env_bearer or oauth.

Optional Analytics Events settings

Setting Purpose
APPD_ANALYTICS_EVENTS_URL Events Service base origin. Required by live Events tools. Do not append /events or /events/query.
APPD_ANALYTICS_EVENTS_GLOBAL_ACCOUNT_NAME Controller Global account name
X-Events-API-Key HTTP request header containing the caller's Events API key.(Http mode)
EVENTS_API_KEY Stdio process variable containing the Events key. Ignored in HTTP mode.

Missing Analytics configuration does not prevent startup. The local get_analytics_event_type_catalog remains available; live field discovery and query tools return a typed configuration error.

Optional server and operational settings

Setting Default Notes
MCP_PORT 6350 HTTP/HTTPS listener port.
MCP_SSL_CERTFILE / MCP_SSL_KEYFILE unset Both are required to enable in-process HTTPS.
APPD_VERIFY_SSL true Controller and Events certificate and host name verification.
SSL_CERT_FILE / SSL_CERT_DIR platform defaults Optional CA bundle/directory overrides; paths must exist inside the runtime.
APPD_TIMEOUT_READ 30 Controller response-body read timeout in seconds.
APPD_TOOL_WALLCLOCK_S 90 Total per-tool deadline. 0 turns off the cap; this value is not recommended for shared deployments.
APPD_CONTROLLER_MAX_RESPONSE_BYTES 4194304 (4 MiB) Positive ceiling for each Controller response; metric discovery inherits it.
APPD_LOGFILE unset When unset, logs go to stdout for HTTP and stderr for stdio.
APPD_LOGLEVEL INFO Application log level.
APPD_HTTPX_LOGLEVEL INFO Set WARNING in production to reduce outbound request logging.
APPD_UVICORN_LOGLEVEL INFO Uvicorn and access-log level.
MCP_AUDIT_LOGLEVEL INFO One-line-per-tool-call audit logger.