# Microsoft Entra ID (Azure AD) Configuration
# Copy this file to .env and fill in your values

# Your Azure AD tenant ID
# Find at: Azure Portal > Entra ID > Overview > Tenant ID
AZURE_TENANT_ID=your-tenant-id-here

# Application (client) ID for the MCP server app registration
# This is the audience that tokens must be issued for
AZURE_CLIENT_ID=your-client-id-here

# Client secret for calling Microsoft Graph API (optional)
# Only needed if your MCP tools call Graph API on behalf of users
AZURE_CLIENT_SECRET=your-client-secret-here

# Optional: Specific API permissions/scopes your MCP server accepts
# Comma-separated list of custom scopes defined in your app registration
# MCP_SCOPES=api://your-client-id/mcp.read,api://your-client-id/mcp.write