| LIBRENMS_URL | Yes | LibreNMS instance URL (e.g., https://librenms.example.com) |
| LIBRENMS_TOKEN | Yes | LibreNMS API token with appropriate permissions Secret. |
| LIBRENMS_VERIFY_SSL | No | Verify TLS certificates for LibreNMS requests (true/false) |
| LIBRENMS_TIMEOUT | No | HTTP timeout for LibreNMS API requests in seconds |
| READ_ONLY_MODE | No | Enable read-only mode to block write operations |
| DISABLED_TAGS | No | Comma-separated tool tags to disable (e.g., alerts,bills) |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR) |
| RATE_LIMIT_ENABLED | No | Enable per-client rate limiting (true/false) |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests allowed per rate-limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate-limit window duration in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy: 'bm25' (natural language) or 'regex' (pattern match) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum number of tools returned by search_tools |
| LIBRENMS_URL | Yes | LibreNMS instance URL (e.g., https://librenms.example.com) |
| LIBRENMS_TOKEN | Yes | LibreNMS API token with appropriate permissions Secret. |
| LIBRENMS_VERIFY_SSL | No | Verify TLS certificates for LibreNMS requests (true/false) |
| LIBRENMS_TIMEOUT | No | HTTP timeout for LibreNMS API requests in seconds |
| READ_ONLY_MODE | No | Enable read-only mode to block write operations |
| DISABLED_TAGS | No | Comma-separated tool tags to disable (e.g., alerts,bills) |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR) |
| RATE_LIMIT_ENABLED | No | Enable per-client rate limiting (true/false) |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests allowed per rate-limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate-limit window duration in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy: 'bm25' (natural language) or 'regex' (pattern match) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum number of tools returned by search_tools |
| MCP_HTTP_PORT | No | Port for HTTP server (default: 8000) |
| MCP_HTTP_BEARER_TOKEN | No | Optional bearer token for HTTP transport authentication Secret. |
| MCP_TRANSPORT | No | MCP transport type: stdio, sse, or http (alias: streamable-http). Unknown values stop the server at startup. |
| LIBRENMS_URL | Yes | LibreNMS instance URL (e.g., https://librenms.example.com) |
| LIBRENMS_TOKEN | Yes | LibreNMS API token with appropriate permissions Secret. |
| LIBRENMS_VERIFY_SSL | No | Verify TLS certificates for LibreNMS requests (true/false) |
| LIBRENMS_TIMEOUT | No | HTTP timeout for LibreNMS API requests in seconds |
| READ_ONLY_MODE | No | Enable read-only mode to block write operations |
| DISABLED_TAGS | No | Comma-separated tool tags to disable (e.g., alerts,bills) |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR) |
| RATE_LIMIT_ENABLED | No | Enable per-client rate limiting (true/false) |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests allowed per rate-limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate-limit window duration in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy: 'bm25' (natural language) or 'regex' (pattern match) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum number of tools returned by search_tools |
| SENTRY_DSN | No | Sentry DSN for optional error tracking Secret. |
| SENTRY_TRACES_SAMPLE_RATE | No | Sentry traces sample rate (0.0-1.0) |
| SENTRY_SEND_DEFAULT_PII | No | Allow Sentry to include default PII, including tool inputs and outputs, in events (true/false) |
| SENTRY_ENVIRONMENT | No | Sentry environment name (e.g., production) |
| SENTRY_RELEASE | No | Sentry release identifier |
| SENTRY_PROFILE_SESSION_SAMPLE_RATE | No | Sentry profile session sample rate (0.0-1.0) |
| SENTRY_PROFILE_LIFECYCLE | No | Sentry profiling lifecycle mode |
| SENTRY_ENABLE_LOGS | No | Enable Sentry log capture integration (true/false) |
| MCP_HTTP_PORT | No | Port for HTTP server (default: 8000) |
| MCP_HTTP_BEARER_TOKEN | No | Optional bearer token for HTTP transport authentication Secret. |
| MCP_TRANSPORT | No | MCP transport type: stdio, sse, or http (alias: streamable-http). Unknown values stop the server at startup. |