104f08a691
Covers what Task 1 actually enforces: auth is only on when MCP_AUTH_TOKENS is set (otherwise every caller is one anonymous, shared-bucket identity), rate limits are per identity, and the token parser rejects empty tokens, whitespace, duplicates, and all-blank values at startup rather than degrading silently. Notes that vector_submit_transaction and vector_await_transaction take no mnemonic and sign nothing. Updates the tool count from 23 to 25 everywhere it appears in the README. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
21 lines
962 B
Plaintext
21 lines
962 B
Plaintext
# Vector MCP Server Configuration
|
|
# ================================
|
|
|
|
# Vector Network Endpoints
|
|
VECTOR_OGMIOS_URL=https://ogmios.vector.testnet.apexfusion.org
|
|
VECTOR_KOIOS_URL=https://v2.koios.vector.testnet.apexfusion.org/
|
|
VECTOR_SUBMIT_URL=https://submit.vector.testnet.apexfusion.org/api/submit/tx
|
|
VECTOR_EXPLORER_URL=https://vector.testnet.apexscan.org
|
|
|
|
# Safety Limits (in lovelace, 1 ADA = 1,000,000 lovelace)
|
|
VECTOR_SPEND_LIMIT_PER_TX=100000000 # 100 ADA per transaction
|
|
VECTOR_SPEND_LIMIT_DAILY=500000000 # 500 ADA daily limit
|
|
|
|
# Audit Log
|
|
VECTOR_AUDIT_LOG_PATH=./vector-audit-log.json # Path for persistent audit log (default: ./vector-audit-log.json)
|
|
|
|
# Auth - when set, every request must carry `Authorization: Bearer <token>`.
|
|
# Comma-separated; each entry is `label:token` or a bare token.
|
|
# Leave unset for localhost use. Set it on any instance reachable by others.
|
|
# MCP_AUTH_TOKENS=alice:replace-me,bob:replace-me-too
|