OptionalagentSet by the agent when mounted: tool calls then dispatch to the agent in-process (no socket)
instead of reaching its public api_endpoint over HTTP.
OptionalagentStandalone MCP server only (set via FOREST_AGENT_URL). Internal URL the tools use to reach
the agent's data layer, defaulting to the environment's public api_endpoint.
OptionalauthForest Admin authentication secret
OptionalbaseOpt-in path prefix under which the MCP protocol and OAuth routes are mounted, e.g. '/ai'.
The .well-known discovery documents stay at the origin root (per RFC 8414/9728) but are
served at prefix-suffixed paths. Defaults to the origin root. Use it to avoid colliding
with a host app's own OAuth routes when embedded. Requires the agent to be served at the
domain root.
OptionalenabledList of tool names to enable (allowlist). Only these tools will be exposed. New tools in future releases will NOT be auto-enabled.
OptionalenvForest Admin environment secret
OptionalforestForest Admin app URL (for OAuth redirects)
OptionalforestOptional Forest server client for dependency injection (from agent integration)
OptionalforestForest Admin server URL
OptionalloggerOptional logger function. Defaults to console logging.
OptionaltokenUpper bounds on the OAuth token lifetimes this server issues. Forest grants 1 hour
(3600s) for an access token and 8 days (691200s) for a refresh token; each value can only
shorten that, never extend it. refreshTokenSeconds bounds the time between two interactive
logins. Minimum 60s for either.
Options for configuring the Forest Admin MCP Server