@backblaze-labs/b2-mcp
    Preparing search index...

    Interface OAuthEnvironmentVariables

    Environment variable names used to configure OAuth resource-server mode.

    interface OAuthEnvironmentVariables {
        allowedAlgorithms: "B2_OAUTH_ALLOWED_ALGORITHMS";
        allowedJwtTypes: "B2_OAUTH_ALLOWED_JWT_TYPES";
        allowedSubjects: "B2_OAUTH_ALLOWED_SUBJECTS";
        allowedTokenTypes: "B2_OAUTH_ALLOWED_TOKEN_TYPES";
        audience: "B2_OAUTH_AUDIENCE";
        authorizationEndpoint: "B2_OAUTH_AUTHORIZATION_ENDPOINT";
        dangerouslyAllowInsecureIssuerUrl: "B2_OAUTH_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL";
        dangerouslyAllowUnauthenticatedIntrospection: "B2_OAUTH_DANGEROUSLY_ALLOW_UNAUTHENTICATED_INTROSPECTION";
        introspectionBearerToken: "B2_OAUTH_INTROSPECTION_BEARER_TOKEN";
        introspectionCacheMaxEntries: "B2_OAUTH_INTROSPECTION_CACHE_MAX_ENTRIES";
        introspectionCacheSkewSeconds: "B2_OAUTH_INTROSPECTION_CACHE_SKEW_SECONDS";
        introspectionCacheTtlSeconds: "B2_OAUTH_INTROSPECTION_CACHE_TTL_SECONDS";
        introspectionCircuitFailures: "B2_OAUTH_INTROSPECTION_CIRCUIT_FAILURES";
        introspectionCircuitOpenMs: "B2_OAUTH_INTROSPECTION_CIRCUIT_OPEN_MS";
        introspectionClientId: "B2_OAUTH_INTROSPECTION_CLIENT_ID";
        introspectionClientSecret: "B2_OAUTH_INTROSPECTION_CLIENT_SECRET";
        introspectionEndpoint: "B2_OAUTH_INTROSPECTION_ENDPOINT";
        introspectionRetries: "B2_OAUTH_INTROSPECTION_RETRIES";
        introspectionRetryDelayMs: "B2_OAUTH_INTROSPECTION_RETRY_DELAY_MS";
        introspectionTimeoutMs: "B2_OAUTH_INTROSPECTION_TIMEOUT_MS";
        issuer: "B2_OAUTH_ISSUER";
        jwksCacheMinTtlSeconds: "B2_OAUTH_JWKS_CACHE_MIN_TTL_SECONDS";
        jwksCacheTtlSeconds: "B2_OAUTH_JWKS_CACHE_TTL_SECONDS";
        jwksCircuitFailures: "B2_OAUTH_JWKS_CIRCUIT_FAILURES";
        jwksCircuitOpenMs: "B2_OAUTH_JWKS_CIRCUIT_OPEN_MS";
        jwksRefreshCooldownMs: "B2_OAUTH_JWKS_REFRESH_COOLDOWN_MS";
        jwksRetries: "B2_OAUTH_JWKS_RETRIES";
        jwksRetryDelayMs: "B2_OAUTH_JWKS_RETRY_DELAY_MS";
        jwksTimeoutMs: "B2_OAUTH_JWKS_TIMEOUT_MS";
        jwksUri: "B2_OAUTH_JWKS_URI";
        jwtClockSkewSeconds: "B2_OAUTH_JWT_CLOCK_SKEW_SECONDS";
        publicUrl: "B2_MCP_PUBLIC_URL";
        requiredScopes: "B2_OAUTH_REQUIRED_SCOPES";
        resource: "B2_OAUTH_RESOURCE";
        serviceDocumentationUrl: "B2_MCP_SERVICE_DOCUMENTATION_URL";
        tokenCacheMaxEntries: "B2_OAUTH_TOKEN_CACHE_MAX_ENTRIES";
        tokenCacheSkewSeconds: "B2_OAUTH_TOKEN_CACHE_SKEW_SECONDS";
        tokenCacheTtlSeconds: "B2_OAUTH_TOKEN_CACHE_TTL_SECONDS";
        tokenEndpoint: "B2_OAUTH_TOKEN_ENDPOINT";
    }
    Index
    allowedAlgorithms allowedJwtTypes allowedSubjects allowedTokenTypes audience authorizationEndpoint dangerouslyAllowInsecureIssuerUrl dangerouslyAllowUnauthenticatedIntrospection introspectionBearerToken introspectionCacheMaxEntries introspectionCacheSkewSeconds introspectionCacheTtlSeconds introspectionCircuitFailures introspectionCircuitOpenMs introspectionClientId introspectionClientSecret introspectionEndpoint introspectionRetries introspectionRetryDelayMs introspectionTimeoutMs issuer jwksCacheMinTtlSeconds jwksCacheTtlSeconds jwksCircuitFailures jwksCircuitOpenMs jwksRefreshCooldownMs jwksRetries jwksRetryDelayMs jwksTimeoutMs jwksUri jwtClockSkewSeconds publicUrl requiredScopes resource serviceDocumentationUrl tokenCacheMaxEntries tokenCacheSkewSeconds tokenCacheTtlSeconds tokenEndpoint
    allowedAlgorithms: "B2_OAUTH_ALLOWED_ALGORITHMS"

    Allowed token algorithms for introspection responses and JWTs.

    allowedJwtTypes: "B2_OAUTH_ALLOWED_JWT_TYPES"

    Allowed JWT typ header values.

    allowedSubjects: "B2_OAUTH_ALLOWED_SUBJECTS"

    Allowed OAuth subjects or issuer-qualified subjects.

    allowedTokenTypes: "B2_OAUTH_ALLOWED_TOKEN_TYPES"

    Allowed token type values from introspection responses.

    audience: "B2_OAUTH_AUDIENCE"

    Expected OAuth audience value.

    authorizationEndpoint: "B2_OAUTH_AUTHORIZATION_ENDPOINT"

    Authorization endpoint advertised in OAuth metadata.

    dangerouslyAllowInsecureIssuerUrl: "B2_OAUTH_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL"

    Local-development override allowing an insecure localhost issuer URL.

    dangerouslyAllowUnauthenticatedIntrospection: "B2_OAUTH_DANGEROUSLY_ALLOW_UNAUTHENTICATED_INTROSPECTION"

    Explicit override allowing unauthenticated OAuth introspection requests.

    introspectionBearerToken: "B2_OAUTH_INTROSPECTION_BEARER_TOKEN"

    Bearer token used to authenticate OAuth introspection requests.

    introspectionCacheMaxEntries: "B2_OAUTH_INTROSPECTION_CACHE_MAX_ENTRIES"

    Legacy maximum token-cache entries setting for introspection deployments.

    introspectionCacheSkewSeconds: "B2_OAUTH_INTROSPECTION_CACHE_SKEW_SECONDS"

    Legacy token-cache skew setting for introspection deployments.

    introspectionCacheTtlSeconds: "B2_OAUTH_INTROSPECTION_CACHE_TTL_SECONDS"

    Legacy token-cache TTL setting for introspection deployments.

    introspectionCircuitFailures: "B2_OAUTH_INTROSPECTION_CIRCUIT_FAILURES"

    Consecutive dependency failures before opening the introspection circuit.

    introspectionCircuitOpenMs: "B2_OAUTH_INTROSPECTION_CIRCUIT_OPEN_MS"

    Introspection circuit open duration in milliseconds.

    introspectionClientId: "B2_OAUTH_INTROSPECTION_CLIENT_ID"

    Client ID used for OAuth introspection basic authentication.

    introspectionClientSecret: "B2_OAUTH_INTROSPECTION_CLIENT_SECRET"

    Client secret used for OAuth introspection basic authentication.

    introspectionEndpoint: "B2_OAUTH_INTROSPECTION_ENDPOINT"

    OAuth introspection endpoint URL.

    introspectionRetries: "B2_OAUTH_INTROSPECTION_RETRIES"

    Maximum retry attempts for OAuth introspection dependency calls.

    introspectionRetryDelayMs: "B2_OAUTH_INTROSPECTION_RETRY_DELAY_MS"

    Retry delay in milliseconds for OAuth introspection dependency calls.

    introspectionTimeoutMs: "B2_OAUTH_INTROSPECTION_TIMEOUT_MS"

    Request timeout in milliseconds for OAuth introspection calls.

    issuer: "B2_OAUTH_ISSUER"

    Trusted OAuth issuer URL.

    jwksCacheMinTtlSeconds: "B2_OAUTH_JWKS_CACHE_MIN_TTL_SECONDS"

    Minimum JWKS cache TTL in seconds.

    jwksCacheTtlSeconds: "B2_OAUTH_JWKS_CACHE_TTL_SECONDS"

    Maximum JWKS cache TTL in seconds.

    jwksCircuitFailures: "B2_OAUTH_JWKS_CIRCUIT_FAILURES"

    Consecutive dependency failures before opening the JWKS circuit.

    jwksCircuitOpenMs: "B2_OAUTH_JWKS_CIRCUIT_OPEN_MS"

    JWKS circuit open duration in milliseconds.

    jwksRefreshCooldownMs: "B2_OAUTH_JWKS_REFRESH_COOLDOWN_MS"

    Cooldown in milliseconds before refreshing JWKS for an unknown kid.

    jwksRetries: "B2_OAUTH_JWKS_RETRIES"

    Maximum retry attempts for JWKS dependency calls.

    jwksRetryDelayMs: "B2_OAUTH_JWKS_RETRY_DELAY_MS"

    Retry delay in milliseconds for JWKS dependency calls.

    jwksTimeoutMs: "B2_OAUTH_JWKS_TIMEOUT_MS"

    Request timeout in milliseconds for JWKS calls.

    jwksUri: "B2_OAUTH_JWKS_URI"

    JWKS endpoint URL.

    jwtClockSkewSeconds: "B2_OAUTH_JWT_CLOCK_SKEW_SECONDS"

    Allowed clock skew in seconds for JWT numeric-date claims.

    publicUrl: "B2_MCP_PUBLIC_URL"

    Public MCP deployment URL used in metadata.

    requiredScopes: "B2_OAUTH_REQUIRED_SCOPES"

    Required OAuth scopes beyond the B2 deployment scope.

    resource: "B2_OAUTH_RESOURCE"

    OAuth protected resource URL.

    serviceDocumentationUrl: "B2_MCP_SERVICE_DOCUMENTATION_URL"

    Optional service documentation URL advertised in metadata.

    tokenCacheMaxEntries: "B2_OAUTH_TOKEN_CACHE_MAX_ENTRIES"

    Maximum cached token entries.

    tokenCacheSkewSeconds: "B2_OAUTH_TOKEN_CACHE_SKEW_SECONDS"

    Token-cache expiration skew in seconds.

    tokenCacheTtlSeconds: "B2_OAUTH_TOKEN_CACHE_TTL_SECONDS"

    Token-cache TTL in seconds.

    tokenEndpoint: "B2_OAUTH_TOKEN_ENDPOINT"

    Token endpoint advertised in OAuth metadata.

    Settings
    Member Visibility

    On This Page
    Properties