Config/config.secrets.example.json

{
  "passwords": {
    "domainAdminCred": {
      "usernameEncrypted": "<dpapi-encrypted-string-from-convertfrom-securestring>",
      "passwordEncrypted": "<dpapi-encrypted-string-from-convertfrom-securestring>",
      "username": "",
      "password": ""
    }
  },
  "settings": {
    "agent": {
      "apiKeyEncrypted": "<dpapi-encrypted-string-from-convertfrom-securestring>",
      "searchWebApiKeyEncrypted": "<dpapi-encrypted-string-from-convertfrom-securestring>",
      "mcpTavilyApiKeyEncrypted": "<dpapi-encrypted-string-from-convertfrom-securestring>",
      "mcp": {
        "enabled": true,
        "servers": [
          {
            "name": "tavily",
            "enabled": true,
            "transport": "Stdio",
            "command": "npx",
            "arguments": ["-y", "tavily-mcp"],
            "authMode": "None",
            "credentialEnvironmentVariable": "TAVILY_API_KEY",
            "credentialSecretKeyName": "Tavily",
            "namespacePrefix": "tavily",
            "requestTimeoutSeconds": 30
          },
          {
            "name": "pdq-connect",
            "enabled": true,
            "transport": "StreamableHttp",
            "endpoint": "https://app.pdq.com/mcp",
            "authMode": "OAuth2",
            "profileId": "default",
            "oauth": {
              "issuerUrl": "https://app.pdq.com",
              "clientId": "<replace-with-your-pdq-client-id>",
              "scopes": ["openid", "profile", "pdq.connect"],
              "redirectUri": "http://localhost:3000/oauth/callback",
              "allowedRedirectUris": ["http://localhost:3000/oauth/callback"],
              "tokenCacheIdentity": "pdq/default",
              "redirectPolicy": "ExactAllowlist",
              "tokenCacheStoragePolicy": "ProcessMemory"
            },
            "namespacePrefix": "pdq",
            "requestTimeoutSeconds": 30
          }
        ]
      }
    },
    "ad": {
      "domainController": "dc01.yourdomain.local",
      "searchBase": "DC=yourdomain,DC=local"
    },
    "remoting": {
      "credSSPDelegateComputers": "*.yourdomain.local"
    },
    "tenant": {
      "organizationName": "yourdomain.onmicrosoft.com",
      "upnSuffix": "yourdomain.com",
      "tenantId": "00000000-0000-0000-0000-000000000000"
    },
    "graph": {
      "tenantId": "00000000-0000-0000-0000-000000000000"
    }
  }
}