render.yaml

services:
  - type: web
    name: madmcp-server
    runtime: node
    plan: free
    buildCommand: npm install
    startCommand: npm start
    healthCheckPath: /health
    envVars:
      # Auto-generated by Render at deploy time — solves the #1 amateur
      # footgun (deploying with /mcp wide open because this got skipped).
      - key: MCP_SHARED_KEY
        generateValue: true

      # Connector tokens are all optional and independent. Leave any of
      # these blank in the Render UI to skip that connector — its tools
      # will just fail at call time rather than blocking the others.
      - key: GITHUB_TOKEN
        sync: false
      - key: NOTION_TOKEN
        sync: false
      - key: MEM0_API_KEY
        sync: false
      - key: CLOUDFLARE_API_TOKEN
        sync: false
      - key: CLOUDFLARE_ACCOUNT_ID
        sync: false
      - key: GEMINI_API_KEY
        sync: false

      # IP_ALLOWLIST_ENABLED and ALLOWED_IP_RANGES are intentionally omitted
      # here so config.js's defaults apply (allowlist ON, pre-set to
      # Claude's published connector range) — correct out of the box for
      # the target use case (connecting from Claude.ai).