| OXIDIZED_URL | Yes | Oxidized web base URL (e.g., http://localhost:8888) |
| OXIDIZED_USERNAME | No | HTTP Basic auth username (e.g., for a reverse proxy in front of oxidized-web) |
| OXIDIZED_PASSWORD | No | HTTP Basic auth password Secret. |
| OXIDIZED_VERIFY_SSL | No | Verify SSL certificates (true/false) |
| OXIDIZED_TIMEOUT | No | Request timeout in seconds |
| OXIDIZED_SEARCH_TIMEOUT | No | Timeout in seconds for configuration searches (oxidized-web reads every stored configuration) |
| OXIDIZED_REDACT_NODE_VARS | No | Redact node vars (may contain device credentials) in tool output |
| READ_ONLY_MODE | No | Enable read-only mode to restrict write operations |
| OXIDIZED_DISABLED_TAGS | No | Comma-separated list of tags to disable tools for |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL) |
| RATE_LIMIT_ENABLED | No | Enable rate limiting |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests per rate limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate limit window in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy (bm25 or regex) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum tool search results returned by search_tools |
| OXIDIZED_URL | Yes | Oxidized web base URL (e.g., http://localhost:8888) |
| OXIDIZED_USERNAME | No | HTTP Basic auth username (e.g., for a reverse proxy in front of oxidized-web) |
| OXIDIZED_PASSWORD | No | HTTP Basic auth password Secret. |
| OXIDIZED_VERIFY_SSL | No | Verify SSL certificates (true/false) |
| OXIDIZED_TIMEOUT | No | Request timeout in seconds |
| OXIDIZED_SEARCH_TIMEOUT | No | Timeout in seconds for configuration searches (oxidized-web reads every stored configuration) |
| OXIDIZED_REDACT_NODE_VARS | No | Redact node vars (may contain device credentials) in tool output |
| READ_ONLY_MODE | No | Enable read-only mode to restrict write operations |
| OXIDIZED_DISABLED_TAGS | No | Comma-separated list of tags to disable tools for |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL) |
| RATE_LIMIT_ENABLED | No | Enable rate limiting |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests per rate limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate limit window in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy (bm25 or regex) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum tool search results returned by search_tools |
| MCP_HTTP_PORT | No | Port for HTTP server (default: 8000) |
| MCP_TRANSPORT | No | MCP transport type (http for HTTP, stdio for stdio) |
| OXIDIZED_URL | Yes | Oxidized web base URL (e.g., http://localhost:8888) |
| OXIDIZED_USERNAME | No | HTTP Basic auth username (e.g., for a reverse proxy in front of oxidized-web) |
| OXIDIZED_PASSWORD | No | HTTP Basic auth password Secret. |
| OXIDIZED_VERIFY_SSL | No | Verify SSL certificates (true/false) |
| OXIDIZED_TIMEOUT | No | Request timeout in seconds |
| OXIDIZED_SEARCH_TIMEOUT | No | Timeout in seconds for configuration searches (oxidized-web reads every stored configuration) |
| OXIDIZED_REDACT_NODE_VARS | No | Redact node vars (may contain device credentials) in tool output |
| READ_ONLY_MODE | No | Enable read-only mode to restrict write operations |
| OXIDIZED_DISABLED_TAGS | No | Comma-separated list of tags to disable tools for |
| LOG_LEVEL | No | Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL) |
| RATE_LIMIT_ENABLED | No | Enable rate limiting |
| RATE_LIMIT_MAX_REQUESTS | No | Maximum requests per rate limit window |
| RATE_LIMIT_WINDOW_MINUTES | No | Rate limit window in minutes |
| TOOL_SEARCH_ENABLED | No | Enable FastMCP tool search transform |
| TOOL_SEARCH_STRATEGY | No | Tool search strategy (bm25 or regex) |
| TOOL_SEARCH_MAX_RESULTS | No | Maximum tool search results returned by search_tools |
| MCP_HTTP_PORT | No | Port for HTTP server (default: 8000) |