# Per-host secrets for claude-cloud. Copy to claude-cloud.env (gitignored)
# and fill with real values. The renderer fails if any required key is missing.

# sendblue-channel
SENDBLUE_API_KEY_ID=
SENDBLUE_API_SECRET_KEY=

# teams-channel
MSTEAMS_APP_ID=
MSTEAMS_APP_PASSWORD=
MSTEAMS_TENANT_ID=

# advancedmd (Phase B), rippling + ringcentral + curogram: bearer token sent
# in the Authorization header of the rendered mcpServers["advancedmd"],
# mcpServers["rippling"], mcpServers["ringcentral"], and
# mcpServers["curogram"] entries. Read once from ~/.config/mcp-bearer-token
# and shared with the per-server supervisors' ~/.config/<name>-mcp.env on the VM.
MCP_BEARER_TOKEN=

# curogram (v1 messaging): the supervisor (~/run-curogram-mcp.sh) reads these
# from its OWN gitignored env file (~/.config/curogram-mcp.env, mode 0600) --
# NOT from this client-side .env and NOT embedded in the rendered .mcp.json.
# Listed here only for documentation. The server logs in to Curogram with
# these to mint a cookie/XSRF session and auto-relogins on 401.
#   CUROGRAM_AGENT_USERNAME=agent@exulthealthcare.com
#   CUROGRAM_AGENT_PASSWORD=...
#   MCP_BEARER_TOKEN=...   (same token as above; gates the HTTP transport)