feat: add b2b_ecommerce example for auth0-ai-mcp

packages/auth0-ai-mcp/examples/b2b_ecommerce/.env.example

@@ -0,0 +1,32 @@
+# Auth0 tenant domain (no https://, no trailing slash)
+AUTH0_DOMAIN=your-tenant.us.auth0.com
+
+# Optional: switch the server into organization-required mode.
+# When set, an incoming MCP token is rejected unless its org_id claim matches this value.
+# Leave blank for a non-org deployment. See "Running in B2B org mode" in the README.
+AUTH0_ORGANIZATION_ID=
+
+# This MCP server's own API identifier, which is also its public URL. MCP clients read it from the
+# RFC 9728 metadata the server serves and request a token for exactly this value.
+AUTH0_AUDIENCE=http://localhost:3002/mcp
+
+# Downstream service audiences, each a separate API registered on the tenant
+ORDERS_AUDIENCE=https://orders.api/
+PAYMENTS_AUDIENCE=https://payments.api/
+INVENTORY_AUDIENCE=https://inventory.api/
+SHIPPING_AUDIENCE=https://shipping.api/
+CUSTOMERS_AUDIENCE=https://customers.api/
+NOTIFICATIONS_AUDIENCE=https://notifications.api/
+ANALYTICS_AUDIENCE=https://analytics.api/
+
+# OBO token cache (in-memory in this example)
+# At least 32 characters, e.g. openssl rand -hex 32
+TOKEN_STORE_SECRET=
+# Scope-matching mode for the OBO cache: strict or non_strict
+SCOPE_MATCHING=strict
+
+# --- OBO token exchange: a resource-server Custom API client ---
+# app_type=resource_server, resource_server_identifier set to AUTH0_AUDIENCE, with the OBO
+# exchange profile enabled and user-delegated client grants to the downstream APIs.
+OBO_CLIENT_ID=
+OBO_CLIENT_SECRET=