| DBS | Yes | Engines to enable, comma-separated. Only the listed engines get their tools registered. Example: mysql,redis,kafka |
| READ_ONLY | No | Set to true to hide every write tool and restrict *_execute_query to SELECT-style statements. Recommended when pointing at production. |
| MYSQL | No | MySQL connection string(s), semicolon-separated for multiple instances. Format: mysql://<user>:<password>@<host>:3306/<database>?alias=dev&default=true — alias is required. Secret. |
| POSTGRESQL | No | PostgreSQL connection string(s), semicolon-separated. Format: postgresql://<user>:<password>@<host>:5432/<database>?alias=dev&ssl=true — alias is required. Secret. |
| REDSHIFT | No | Redshift connection string(s), semicolon-separated. Format: redshift://<user>:<password>@<host>:5439/<database>?alias=dev&ssl=true — alias is required. Secret. |
| MONGODB | No | MongoDB connection string(s), semicolon-separated. Format: mongodb://<user>:<password>@<host>:27017/<database>?alias=dev — alias is required. Secret. |
| REDIS | No | Redis connection string(s), semicolon-separated. Format: redis://:<password>@<host>:6379/0?alias=dev — leave the password empty for a no-auth instance. alias is required. Secret. |
| ELASTICSEARCH | No | Elasticsearch connection string(s), semicolon-separated. Format: elasticsearch://<user>:<password>@<host>:9200?alias=dev, or http(s)://<host>:9200?alias=dev for no auth. alias is required. Secret. |
| KAFKA | No | Kafka connection string(s), semicolon-separated. Format: kafka://<user>:<password>@<broker1>:9092,<broker2>:9092?alias=dev&mechanism=plain — alias is required. Secret. |
| DYNAMODB_REGION | No | AWS region for DynamoDB. DynamoDB is configured with discrete variables instead of a connection string. |
| DYNAMODB_ACCESS_KEY_ID | No | AWS access key ID for DynamoDB. Secret. |
| DYNAMODB_SECRET_ACCESS_KEY | No | AWS secret access key for DynamoDB. Secret. |