MCPO_API_KEY=top-secret
MSF_PASSWORD=changeme
# Replace both values below with strong random keys before production use.
ZAP_API_KEY=changeme-zap-api-key
MCP_ZAP_API_KEY=changeme-mcp-zap-api-key
ZAP_SAFE_MODE=true
ZAP_ASCAN_THREAD_PER_HOST=2
ZAP_SPIDER_THREADS=2
# 40026 commonly maps to DOM XSS active scan rule in ZAP builds.
ZAP_DISABLED_SCANNERS=40026
MD_SHARE_DIR=/opt/mcps/shared-markdown
OLLAMA_BASE_URL=http://ollama:11434