env.example

# Linear MCP Server - local Bun development
# Copy to .env and fill in provider credentials. Never commit .env.

HOST=127.0.0.1
PORT=3000
NODE_ENV=development
LOG_LEVEL=info

# MCP 2026-07-28 release candidate
MCP_NAME=linear-mcp
MCP_TITLE=Linear
MCP_VERSION=1.0.0
MCP_PUBLIC_URL=http://localhost:3000/mcp
MCP_ALLOWED_HOSTS=localhost,127.0.0.1,[::1]
MCP_ALLOWED_ORIGIN_HOSTNAMES=localhost,127.0.0.1,[::1]
MCP_LEGACY_MODE=stateless
MCP_MAX_REQUEST_BYTES=1048576

# MCP caller authentication through the existing opaque RS-token mapping
AUTH_ENABLED=true
AUTH_STRATEGY=oauth
OAUTH_REQUIRED_SCOPES=read write
# Optional explicit URL of this server's OAuth proxy. Bun defaults to PORT+1.
# OAUTH_PROXY_BASE_URL=http://localhost:3001

# Linear OAuth application
PROVIDER_CLIENT_ID=your_linear_oauth_client_id
PROVIDER_CLIENT_SECRET=your_linear_oauth_client_secret
PROVIDER_ACCOUNTS_URL=https://linear.app/oauth
OAUTH_AUTHORIZATION_URL=https://linear.app/oauth/authorize
OAUTH_TOKEN_URL=https://api.linear.app/oauth/token
OAUTH_REVOCATION_URL=https://api.linear.app/oauth/revoke
OAUTH_SCOPES=read write
OAUTH_REDIRECT_URI=http://localhost:9999/callback
OAUTH_REDIRECT_ALLOWLIST=alice://oauth/callback,http://127.0.0.1:3001/oauth/callback,http://localhost:9999/callback
OAUTH_REDIRECT_ALLOW_ALL=false

# Existing version-1 RS-token file format remains rollback compatible.
RS_TOKENS_FILE=.data/rs_tokens.json
# Base64url-encoded 32-byte key; strongly recommended outside local development.
# RS_TOKENS_ENC_KEY=

# Alternative local provider authorization with MCP caller auth disabled:
# AUTH_ENABLED=false
# AUTH_STRATEGY=none
# LINEAR_ACCESS_TOKEN=lin_api_xxxx

LINEAR_MCP_INCLUDE_JSON_IN_CONTENT=false
RPS_LIMIT=10
CONCURRENCY_LIMIT=5