aurelianflo/.env.example at main · kelm2021/aurelianflo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# All keys are free - sign up at api.data.gov/signup for USDA and Congress (same key)
USDA_API_KEY=
FDA_API_KEY=
CENSUS_API_KEY=
BLS_API_KEY=
AIRNOW_API_KEY=
CONGRESS_API_KEY=
FINNHUB_API_KEY=
ALPHA_VANTAGE_API_KEY=
FRED_API_KEY=
WHOISJSON_API_KEY=
THESPORTSDB_API_KEY=
THE_ODDS_API_KEY=
API_SPORTS_API_KEY=
COURTLISTENER_API_TOKEN=
EPO_OPS_KEY=
EPO_OPS_SECRET=
SEC_USER_AGENT=
UPSTREAM_CONTACT_EMAIL=

# x402 facilitator selection:
# - auto (default): app-managed failover chain (payai, dexter, then coinbase if CDP creds exist)
# - coinbase: use Coinbase facilitator via @coinbase/x402 (requires CDP credentials below)
# - payai | dexter | openx402 | daydreams: pin a specific facilitator
# You may also supply a comma-separated primary/fallback chain, e.g.:
# X402_FACILITATOR=payai,dexter
# Optional additional fallback chain appended after primaries:
X402_FACILITATOR_FALLBACKS=
# Selection strategy: failover (default) or round_robin
X402_FACILITATOR_MODE=failover
X402_FACILITATOR=auto
# Optional explicit facilitator URL override (advanced).
X402_FACILITATOR_URL=
# Required only when X402_FACILITATOR=coinbase
CDP_API_KEY_ID=
CDP_API_KEY_SECRET=

INDEX402_VERIFICATION_HASH=
# JSON array or comma-separated list of EIP-191 signatures for your origin URL.
# Example JSON: ["0x<130-hex-signature>"]
X402_OWNERSHIP_PROOFS=
X402_ORIGIN_TITLE=AurelianFlo
X402_ORIGIN_DESCRIPTION=Curated, high-signal endpoints with x402-native access.
AURELIAN_WRAPPED_URL=https://wrap.aurelianflo.com

# Merc-Trust enforcement (service-side gate for paid routes)
# Set to true only after clients include trust receipts on paid calls.
MERC_TRUST_ENFORCEMENT_ENABLED=false
MERC_TRUST_BASE_URL=https://merc-trust.vercel.app
MERC_TRUST_TIMEOUT_MS=15000
MERC_TRUST_FAIL_OPEN=false
# Comma-delimited path prefixes to enforce. Leave blank to disable route-level enforcement.
MERC_TRUST_ENFORCED_PATH_PREFIXES=
# Comma-delimited prefixes where review receipts are accepted (only applies to enforced paths).
MERC_TRUST_REVIEW_ALLOWED_PATH_PREFIXES=

# Receipt policy (deep-check defaults)
MERC_TRUST_ALLOWED_SERVICE_IDS=trust-evaluate,trust-delegation-verify,trust-identity-attest,trust-memory-enforce
MERC_TRUST_ALLOWED_MODES=
MERC_TRUST_ALLOWED_DECISIONS=allow
MERC_TRUST_ALLOWED_GUARANTEE_CODES=execution-allowed
MERC_TRUST_REVIEW_ALLOWED_DECISIONS=allow,review
MERC_TRUST_REVIEW_ALLOWED_GUARANTEE_CODES=execution-allowed,review-required
MERC_TRUST_REQUIRE_SIGNATURE=true
MERC_TRUST_REQUIRE_CANONICAL_IDENTITY=true
MERC_TRUST_REQUIRE_RECEIPT_TYPE=mercury-trust-receipt
MERC_TRUST_REQUIRE_VERIFICATION_ENDPOINT_MATCH=true
MERC_TRUST_EXPECTED_VERIFICATION_ENDPOINT=/api/trust/receipts/verify
MERC_TRUST_REQUIRE_RECEIPT_EXPIRY=true
MERC_TRUST_MAX_RECEIPT_AGE_MS=
MERC_TRUST_ENFORCE_SUBJECT_WALLET_MATCH=false
MERC_TRUST_ENFORCE_TARGET_AGENT_MATCH=false
MERC_TRUST_SINGLE_USE_RECEIPT=false
MERC_TRUST_SINGLE_USE_TTL_MS=