config.sample.php

<?php

/**
 * MCP debug client — sample configuration.
 *
 * Copy to config.php and edit, or just edit config.php directly and let the
 * in-browser Settings screen write config.local.php over the top.
 */

return [
    // Full URL of the MCP server's Streamable HTTP endpoint — the single path
    // every JSON-RPC message is POSTed to. Usually ends in /mcp.
    'server_url' => 'http://localhost:3000/mcp',

    // Protocol version `initialize` asks for. The server answers with the one
    // it actually chose; the Conformance screen grades that negotiation.
    'protocol_version' => '2025-06-18',

    // Sent as clientInfo.name — what the server's logs will call you.
    'client_name' => 'MCP debug',

    // Extra request headers, one "Name: value" per line. A bearer token goes
    // here:  Authorization: Bearer eyJhbGciOi...
    // NOTE: stored in plain text on disk once saved through Settings.
    'headers' => '',

    // Seconds to wait for a response.
    'timeout' => 30,

    // Verify the server's TLS certificate. Turn off ONLY for a local server
    // with a self-signed certificate — off means anyone on the path can read
    // the token you are sending.
    'verify_tls' => true,

    // Relative path to the OAuth debug client, used by the 401 diagnosis panel
    // to link you somewhere that can actually mint a token. '' hides the links.
    'oauth_tool_path' => '..',

    // Password hash (password_hash) gating the ?settings screen. Empty means
    // open — set one through the UI, which stores it hashed.
    'settings_password' => '',
];