.env.example

NODE_ENV=development
PORT=8402
PUBLIC_ORIGIN=http://localhost:8402
DATABASE_PATH=./data/goldkey.sqlite
# Hosted zero-cash deployments use a Neon pooled URL instead of DATABASE_PATH.
# Production URLs must include sslmode=require (or verify-ca / verify-full).
# DATABASE_URL=postgresql://user:password@host/database?sslmode=require
DATABASE_POOL_MAX=5

# Base Sepolia for testing. The public RPC is rate-limited; use a dedicated RPC in production.
CHAIN_ID=84532
RPC_URL=https://sepolia.base.org
GOLDKEY_CONTRACT=0x0000000000000000000000000000000000000000
# Circle USDC on Base Sepolia, verified 2026-08-10:
USDC_ADDRESS=0x036CbD53842c5426634e7929541eC2318f3dCF7e
TREASURY_ADDRESS=0x0000000000000000000000000000000000000000

# Base mainnet uses CHAIN_ID=8453 and Circle USDC:
# USDC_ADDRESS=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

# Paygo is optional locally. The route checks tool/request shape before payment verification.
# It then executes into a buffer and releases the result only after successful settlement;
# handler errors cancel settlement. Every successful paygo request is an independent
# 0.01-USDC purchase.
X402_ENABLED=false
X402_FACILITATOR_URL=https://x402.org/facilitator
# For Coinbase's production facilitator, set these Ed25519 CDP secret-key credentials.
CDP_API_KEY_ID=
CDP_API_KEY_SECRET=
# For another facilitator, static headers can be supplied instead.
X402_AUTH_HEADERS_JSON=

# Never enable this in production. It exists only for the local demo and tests.
DEV_AUTH_BYPASS=false
DEV_AUTH_TOKEN=replace-with-a-long-random-local-token