Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 32 additions & 0 deletions packages/auth0-ai-fastmcp/examples/b2b_ecommerce/.env.example
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
# Auth0 tenant domain (no https://, no trailing slash)
AUTH0_DOMAIN=your-tenant.us.auth0.com

# Optional: switch the server into organization-required mode.
# When set, an incoming MCP token is rejected unless its org_id claim matches this value.
# Leave blank for a non-org deployment. See "Running in B2B org mode" in the README.
AUTH0_ORGANIZATION_ID=

# Base URL of this server, without /mcp. The MCP API identifier in Auth0 is this value plus /mcp.
# See ../../docs/Configuration.md for why.
MCP_RESOURCE_URL=http://localhost:3002

# Downstream service audiences, each a separate API registered on the tenant
ORDERS_AUDIENCE=https://orders.api/
PAYMENTS_AUDIENCE=https://payments.api/
INVENTORY_AUDIENCE=https://inventory.api/
SHIPPING_AUDIENCE=https://shipping.api/
CUSTOMERS_AUDIENCE=https://customers.api/
NOTIFICATIONS_AUDIENCE=https://notifications.api/
ANALYTICS_AUDIENCE=https://analytics.api/

# OBO token cache (in-memory in this example)
# At least 32 characters, for example openssl rand -hex 32
TOKEN_STORE_SECRET=
# Scope-matching mode for the OBO cache: strict or non_strict
SCOPE_MATCHING=strict

# --- OBO token exchange: a resource-server Custom API client ---
# app_type=resource_server, resource_server_identifier set to MCP_RESOURCE_URL plus /mcp, with the OBO
# exchange profile enabled and user-delegated client grants to the downstream APIs.
OBO_CLIENT_ID=
OBO_CLIENT_SECRET=
Loading
Loading