Edit ~/.config/environment.d/mcp-secrets.conf (symlinked from deploy/mcp-secrets.conf).
key
notes
XAI_API_KEYxAI API key
APP_AUTH_TOKENBearer token for hearth IPC (openssl rand -hex 32)
MCP_AUTH_TOKENBearer token guarding the public tunnel endpoints (openssl rand -hex 32)
key
default
notes
MNEMO_HEARTH_PORT7744TCP port hearth listens on
MNEMO_HEARTH_BIND127.0.0.1Set to 0.0.0.0 for LAN access
MNEMO_HISTORY_TURNS64Turns reloaded from JSONL on hearth startup
MNEMO_GATEWAY_JSON~/.config/mnemo/gateway.jsonRuntime MCP manifest path
MNEMO_CONTINUITY_JSONdata/continuity.jsonIdentity anchor injected as system message
key
default
notes
MNEMO_HEARTH_HOST127.0.0.1Hearth daemon host (set to the host's IP for remote access)
MNEMO_CLIENT_PERSON—
Speaker identity tag written to turn JSONL (e.g. Alice). Optional — omit for anonymous. Set per-client, not on the server.
key
default
notes
MNEMO_CONVERSATION_JSONL~/.config/mnemo/conversation.jsonlAppend-only turn log (source of truth)
MNEMO_TOOL_TURNS_JSONL~/.config/mnemo/tool_turns.jsonlAppend-only tool turn log
MNEMO_RESPONSE_ID_PATH—
Path to persist last xAI response ID (server-side state)
key
default
notes
QDRANT_REMOTE_URL—
e.g. http://qdrant-host:6333; falls back to local embedded if unset
MNEMO_CONVERSATION_COLLECTIONmnemo-conversationQdrant collection for conversation turns
MNEMO_TOOL_TURNS_COLLECTIONmnemo-tool-turnsQdrant collection for tool turn history
MNEMO_PRESENCE_COLLECTIONmnemo-presenceQdrant collection for relational identity (cozy-presence MCP)
PRESENCE_INDEX_PATH~/.config/mnemo/presence_qdrantLocal embedded qdrant path for presence index
PRESENCE_EMBED_MODELsentence-transformers/all-MiniLM-L6-v2Embedding model for presence index
When plugging in qdrant/mcp-server-qdrant per collection, map its vars using the MNEMO_${PREFIX} convention:
mcp-server-qdrant var
mnemo convention
QDRANT_URLMNEMO_CONVERSATION_QDRANT_URL / MNEMO_TOOL_TURNS_QDRANT_URL / MNEMO_PRESENCE_QDRANT_URL
QDRANT_API_KEYMNEMO_CONVERSATION_QDRANT_API_KEY etc.
QDRANT_LOCAL_PATHMNEMO_CONVERSATION_QDRANT_LOCAL_PATH etc.
COLLECTION_NAMEMNEMO_CONVERSATION_COLLECTION / MNEMO_TOOL_TURNS_COLLECTION / MNEMO_PRESENCE_COLLECTION
EMBEDDING_PROVIDERMNEMO_CONVERSATION_EMBEDDING_PROVIDER etc.
EMBEDDING_MODELMNEMO_CONVERSATION_EMBEDDING_MODEL etc.
TOOL_STORE_DESCRIPTIONMNEMO_CONVERSATION_QDRANT_TOOL_STORE_DESCRIPTION etc.
TOOL_FIND_DESCRIPTIONMNEMO_CONVERSATION_TOOL_FIND_DESCRIPTION etc.
key
default
notes
MCP_TUNNEL_BACKENDcloudflarecloudflare (trycloudflare) or named (named tunnel) or dns
TUNNEL_NAME—
Named tunnel only: tunnel name
TUNNEL_CRED_FILE—
Named tunnel only: path to credential JSON
TUNNEL_PUBLIC_URL—
Named tunnel only: public HTTPS URL
CLOUDFLARE_API_TOKEN—
DNS backend only
CLOUDFLARE_ACCOUNT_ID—
DNS backend only
CLOUDFLARE_ZONE_ID—
DNS backend only
Presence (cozy-presence MCP service)
key
default
notes
PRESENCE_STORE_PATH~/.config/mnemo/presence.jsonlCozy-presence JSONL store (source of truth)
FastMCP (qdrant/mcp-server-qdrant)
key
notes
FASTMCP_DEBUGset to true to enable verbose FastMCP logging — useful while wiring up qdrant MCP instances
See also: FastMCP environment variables for the full list.
Gateway / proxy (advanced)
key
default
notes
MCP_LOCAL_PORT8080Port mcp-proxy listens on
MCP_MANAGE_PROXY0Set to 1 to have the gateway spawn mcp-proxy itself
MCP_PROXY_CMDdesktop-commanderstdio command mcp-proxy wraps — must be quoted in systemd Environment=
MCP_PROXY_TRANSPORTssesse (stdio wrap via mcp-proxy, default) or streamablehttp (command is a native HTTP server)
MCP_PROXY_PORTMCP_LOCAL_PORT + 1Internal mcp-proxy port when auth is active
MCP_CONFIG_PATH<package>/mcp.confOverride mcp.conf path
MCP_SERVER_LABELgatewayLabel written to gateway.json when no mcp.conf found
MCP_LOG_PATH/tmp/mcp_gateway.logSet to "" to disable file logging