OnBrand by SlideSpeak

Environment

• BASE_URLrequired

  Public OnBrand origin; derives dashboard social metadata and ${BASE_URL}/mcp.

• AWS_REGIONrequired

  AWS region for the Brand Kit asset bucket.

• DATABASE_URLrequired

  Postgres connection string.

• OAUTH_ISSUERrequired

  Expected JWT issuer.

• OAUTH_JWKS_URLrequired

  JWKS endpoint used to verify access token signatures.

• AWS_ACCESS_KEY_IDrequiredsecret

  AWS access key for S3 operations.

• OAUTH_OWNER_ID_CLAIM

  JWT claim used as the OnBrand owner identifier. Defaults to sub.

• OAUTH_TOKEN_ENDPOINTrequiredsecret

  Token exchange endpoint.

• AWS_SECRET_ACCESS_KEYrequiredsecret

  AWS secret access key for S3 operations.

• DASHBOARD_DEV_SERVER_URL

  Development-only dashboard Vite proxy URL used by docker-compose.yml.

• DASHBOARD_SESSION_SECRETrequiredsecret

  Secret used to sign dashboard session cookies.

• OAUTH_DASHBOARD_CLIENT_IDrequired

  Static dashboard OAuth client ID.

• OAUTH_REQUIRED_READ_SCOPErequired

  Read scope required by read-only MCP tools. Defaults to onbrand:read.

• OAUTH_REQUIRED_WRITE_SCOPErequired

  Write scope required by mutating MCP tools. Defaults to onbrand:write.

• OAUTH_REGISTRATION_ENDPOINT

  Dynamic client registration endpoint advertised to MCP clients.

• OAUTH_AUTHORIZATION_ENDPOINTrequired

  Browser authorization endpoint.

• AWS_S3_BUCKET_BRAND_KIT_ASSETSrequired

  Bucket for uploaded Brand Kit assets.

• ASSET_DOWNLOAD_EXPIRES_IN_SECONDS

  Presigned S3 URL lifetime. Defaults to 900.