Configuration reference

PostQueen reads all of its settings from environment variables. With Docker Compose they go in the .env file next to docker-compose.yaml: see Docker Compose. A change takes effect when the postqueen container is recreated, not restarted:

docker compose up -d --no-deps --force-recreate postqueen

NEXT_PUBLIC_ variables need no rebuild. The web app renders its pages on the server and hands these values to the browser at run time, so recreating the container is enough. The one exception is NEXT_PUBLIC_APP_VERSION, which is fixed when the image is built.
The start-up check only warns. After the backend is listening it checks the required values below and logs each problem as a Configuration issue. Nothing stops, so a running container is not proof that the settings are right: docker compose logs postqueen | grep -i "configuration issue".
The backend and the orchestrator read the same variables. In the official image both run in one container. If you run them apart, give both the same environment.

Required

The start-up check reports these when they are missing, and URLs when they are not valid or end in /.

Variable	What it is
`DATABASE_URL`	PostgreSQL connection string, for example `postgresql://user:password@postqueen-postgres:5432/postqueen-db-local`.
`REDIS_URL`	Redis connection string, starting with `redis://`. Holds caches, rate-limit counters and short-lived sign-in state. The schedule lives in Temporal, not Redis.
`JWT_SECRET`	A long random string that signs login sessions. Changing it signs everyone out. Unless `ENCRYPTION_KEY` is set it also encrypts stored secrets: see Encryption keys.
`FRONTEND_URL`	The address people open in the browser, for example `https://postqueen.example.com`. Every network’s redirect address, email links and the allowed browser origin are built from it.
`NEXT_PUBLIC_BACKEND_URL`	The address the browser uses for the API. With the official image it is `FRONTEND_URL` + `/api`. With a backend on its own host, that host with no path.
`BACKEND_INTERNAL_URL`	How the web app’s server reaches the API. `http://localhost:3000` in the official image, whatever your domain. In a split deployment, the backend’s internal address.
`MAIN_URL`	Added to the allowed browser origins next to `FRONTEND_URL`. Set it to the same address.
`STORAGE_PROVIDER`	`local` or `cloudflare`. See Storage and media.

Encryption keys

Variable	What it is
`ENCRYPTION_KEY`	Encrypts the secrets PostQueen stores: the workspace API key, OAuth app client secrets, the passwords and keys typed in to connect networks such as Bluesky, WordPress and Nostr, and the Skool cookies. Unset, `JWT_SECRET` is used.
`PREVIOUS_ENCRYPTION_KEY`	The key the data was encrypted with before the current one. Decryption tries `ENCRYPTION_KEY` first, then this.
`ENCRYPT_INTEGRATION_TOKENS`	Unset or anything but `false`: channel OAuth tokens are stored encrypted. `false` stores them as the network issued them and, at the next start, writes the stored ones back that way. Set it only before going back to an image older than v3.6.102, which cannot read encrypted tokens: start once with `false`, wait for the log line `Decrypted N stored channel token row(s)`, then change the image.

A channel’s OAuth access and refresh tokens, the ones a network hands back after sign-in, are encrypted with the same key. Tokens stored before that are encrypted when the app starts. A token is re-encrypted under a new key only when it is next written, and some never expire, so keep PREVIOUS_ENCRYPTION_KEY set after a rotation. Treat a database dump as sensitive all the same.

On a new install, set ENCRYPTION_KEY to its own random value before there is data. JWT_SECRET then only signs sessions, and rotating it only signs people out.
On an install that never set it, set ENCRYPTION_KEY to the current value of JWT_SECRET. Nothing needs re-encrypting, because that is the key already in use. After that you can rotate JWT_SECRET freely.
To rotate ENCRYPTION_KEY, copy the current value into PREVIOUS_ENCRYPTION_KEY, put the new value in ENCRYPTION_KEY, and recreate the container. Leave both set: a row is re-encrypted only when something rewrites it, so data nobody touches stays on the old key.

How switches are read

For most switches, false means on. Only these compare against the exact string true: DISABLE_REGISTRATION, PASSWORDLESS_LOGIN, WALLET_LOGIN, REQUIRE_EMAIL_ACTIVATION, NOT_SECURED, DISABLE_SSRF_PROTECTION, TEMPORAL_TLS, EMAIL_SECURE, UPLOAD_VIA_SERVER and NEYNAR_SPONSOR_SIGNERS. Every other switch on this page is on when it has any value, so IS_GENERAL=false, RUN_CRON=false or POSTQUEEN_GENERIC_OAUTH=false all turn the setting on. Remove the variable to turn one off. With Docker Compose, IS_GENERAL and RUN_CRON also have a default of true in docker-compose.yaml, so delete their lines there.

PRISMA_MIGRATE has its own rule: see Background work.

Variable	What it does
`DISABLE_REGISTRATION`	`true` refuses new accounts once the first workspace exists. Existing accounts sign in as before. People invited without an account cannot create one, except through your own single sign-on provider.
`IS_GENERAL`	Set it (the Compose file does). It makes `/` open the calendar and shows the Google sign-in button with its companions. Unset, `/` opens analytics and only GitHub sign-in is offered. It does not switch billing: billing turns on only when both Stripe keys are set.
`NOT_SECURED`	`true` drops the `Secure` flag from the login cookie so sign-in works over plain HTTP. For a local try only: on a reachable server it sends sessions in the clear.
`DISALLOW_PLUS`	Refuses email addresses with a `+`, for signing in as well as signing up, so an existing `you+tag@example.com` account is locked out. Sign-in through Google, GitHub or single sign-on is not affected.
`PASSWORDLESS_LOGIN`	`true` signs people in with a one-time code by email. Needs working email. See Abuse protection and rate limits.
`REQUIRE_EMAIL_ACTIVATION`	`true` makes a new email-and-password account click an emailed link before it can sign in, once mail can go out. See Email.
`WALLET_LOGIN`	`true` adds Continue with Wallet (Solana wallets) to the sign-in and sign-up screens.
`MOBILE_APP_SCHEME`	Where `/auth/oauth-mobile-callback` sends a sign-in made from a mobile app of your own. Default `postqueen://auth/callback`.

Button	Shows when	Variables
Your own OIDC provider	`IS_GENERAL` and `POSTQUEEN_GENERIC_OAUTH` are set. It replaces every other button.	See Single sign-on (OIDC)
Google	`IS_GENERAL` is set and single sign-on is not	`YOUTUBE_CLIENT_ID`, `YOUTUBE_CLIENT_SECRET`: sign-in shares the YouTube web client and its redirect URI, `/integrations/social/youtube`. There is no `GOOGLE_CLIENT_ID`. Setup: YouTube setup.
Apple	Next to Google, once `APPLE_CLIENT_ID` is set	`APPLE_CLIENT_ID` (the Services ID), `APPLE_TEAM_ID`, `APPLE_KEY_ID`, `APPLE_PRIVATE_KEY` (the `.p8` key; write line breaks as `\n`), and optionally `APPLE_APP_BUNDLE_ID` for a native iOS app of your own. Register `NEXT_PUBLIC_BACKEND_URL` + `/auth/oauth/apple/redirect` as the return URL.
Farcaster	Next to Google, once `NEYNAR_CLIENT_ID` is set	`NEYNAR_CLIENT_ID`
Wallet	Next to Google, when `WALLET_LOGIN` is `true`	`WALLET_LOGIN`
GitHub	Only when `IS_GENERAL` is unset	`GITHUB_CLIENT_ID`, `GITHUB_CLIENT_SECRET`

Set the four Apple values together: the button appears with APPLE_CLIENT_ID alone and fails without the rest.

Background work

Temporal runs the schedule, and the orchestrator runs its workers. See Self-hosting overview.

Variable	What it does
`TEMPORAL_ADDRESS`	The Temporal server’s `host:port`. `temporal:7233` in the Compose file. Without a reachable server, nothing publishes and no mail is sent.
`TEMPORAL_NAMESPACE`	Temporal namespace. Default `default`.
`TEMPORAL_TLS`	`true` for a server behind TLS, such as Temporal Cloud.
`TEMPORAL_API_KEY`	API key for Temporal Cloud.
`RUN_CRON`	Set on one backend: at start it launches the recurring workflows, which recover posts that failed to schedule, sync analytics and settle billing. Unset, none of them runs. The Compose file sets it; the Helm chart does not.
`ACCOUNT_PURGE_MODE`	The daily purge of what deleted workspaces and users leave behind, three days after deletion. `dry-run` logs what it would remove, `on` removes it, anything else (the default) is off. Independent of `RUN_CRON`.
`ACCOUNT_PURGE_HOLD`	Workspace or user ids the purge leaves alone, separated by commas.
`PRISMA_MIGRATE`	How the schema is applied at start. Unset, empty, `false`, `False`, `FALSE` or `0` runs `prisma db push --accept-data-loss`; any other value runs `prisma migrate deploy`. See Backups and upgrades.
`ORCHESTRATOR_PORT`	Port of the orchestrator’s health endpoint. Default `3002`.
`WORKER_CONCURRENCY_DIVIDER`	Divides each network’s worker concurrency, so several worker machines together stay within what the network allows. Set it to the number of worker machines.
`EXCLUDE_QUEUE`	Queues this worker does not serve, separated by commas, for example `media` to keep it out of video conversion. For pinning a queue to one machine. Emails go out on two queues, `email` and `email-bulk`, rate limited by the Temporal server across all workers: leave them on at least one worker, or no queued mail is sent.

Storage and media

Setup and trade-offs: Uploads and storage and Cloudflare R2.

Variable	What it does
`STORAGE_PROVIDER`	`local` (the default when unset) or `cloudflare`.
`UPLOAD_DIRECTORY`	Where `local` storage writes files. Required with `local`: without it the backend does not start. In the official image it must be `/uploads`, the folder nginx serves.
`NEXT_PUBLIC_UPLOAD_STATIC_DIRECTORY`	The URL path for local files, without slashes: `uploads`.
`PREVIOUS_FRONTEND_URLS`	Addresses a `local` install used to run under, separated by commas. At start, stored file addresses under them move to the current `FRONTEND_URL`. See Uploads and storage.
`CLOUDFLARE_ACCOUNT_ID`, `CLOUDFLARE_ACCESS_KEY`, `CLOUDFLARE_SECRET_ACCESS_KEY`, `CLOUDFLARE_BUCKETNAME`	The R2 account, token and bucket.
`CLOUDFLARE_BUCKET_URL`	The public address media is read from: a custom domain, the `r2.dev` address, or your own `https://postqueen.example.com/api/uploads`. Never the `r2.cloudflarestorage.com` API endpoint.
`CLOUDFLARE_REGION`	Usually `auto`.
`CLOUDFLARE_JURISDICTION`	Only for a bucket created with a jurisdiction, such as `eu`.
`UPLOAD_VIA_SERVER`	`true` sends R2 uploads through the backend instead of from the browser straight to the bucket.
`UPLOAD_TMP_DIR`	Where uploads wait while they are written to storage, and where ffmpeg works. Default: the system temp folder. Keep about 2.5 times the largest upload free.
`MEDIA_PROCESSING_CONCURRENCY`	How many uploaded videos one orchestrator converts at once. Default `1`.
`FFMPEG_PATH`, `FFPROBE_PATH`	Only outside the image, which ships both: point them at an ffmpeg build with libass.
`FFMPEG_TIMEOUT_MS`	Limit for one ffmpeg run, in milliseconds. Default 20 minutes.
`DISABLE_IMAGE_COMPRESSION`	Skips the browser’s image compression before upload, to keep originals byte for byte.

Limits and safety

Variable	What it does
`API_LIMIT`	Requests to create posts through the public API (`POST /public/v1/posts`) per workspace per hour. Default 90; the Compose file sets 30.
`UPLOAD_LIMIT`	Uploads per workspace per hour, counted separately for each upload route. Default 300.
`RESTRICT_UPLOAD_DOMAINS`	One piece of text that every media URL in a public API post must contain, usually your media host. A plain text match, not a list.
`DISABLE_SSRF_PROTECTION`	`true` lets the server fetch private and local addresses: a WordPress, Mastodon, Lemmy, Listmonk or Bluesky server on your own network, webhooks and media downloads. Refused requests fail as `fetch failed` with `Blocked IP` in the log. It applies to the whole install, so set it only when everyone who can add a channel or a webhook is trusted.
`GUARD_*`, `TURNSTILE_SITE_KEY`, `TURNSTILE_SECRET`	Sign-in rate limits and an optional captcha: see Abuse protection and rate limits.

Email

Setup: Email.

Variable	What it does
`EMAIL_PROVIDER`	`resend` or `nodemailer`. Anything else, including unset, sends nothing.
`EMAIL_FROM_ADDRESS`, `EMAIL_FROM_NAME`	The sender. Without both, no mail goes out even with a provider.
`RESEND_API_KEY`	For `resend`.
`EMAIL_HOST`, `EMAIL_PORT`, `EMAIL_USER`, `EMAIL_PASS`	For `nodemailer`, your SMTP server.
`EMAIL_SECURE`	`true` for TLS from the first byte, usually port 465.
`EMAIL_NOTIFICATIONS_FROM_ADDRESS`	Optional. Notifications (publishing summaries, channel and billing alerts) go out from this address instead, on the same verified domain. Replies still reach `EMAIL_FROM_ADDRESS`.
`EMAIL_POSTAL_ADDRESS`	Optional. The company and postal address at the foot of every email. Unset leaves it out.

Networks

Each network’s developer app variables, redirect URI and setup page are on Channel developer apps. Eight networks read no variable: Bluesky, DEV, Hashnode, Lemmy, Listmonk, Moltbook, Nostr and WordPress.

Network	Variables
Instagram and Facebook Page (the Facebook app)	`FACEBOOK_APP_ID`, `FACEBOOK_APP_SECRET`
Instagram (Standalone)	`INSTAGRAM_APP_ID`, `INSTAGRAM_APP_SECRET`
Threads	`THREADS_APP_ID`, `THREADS_APP_SECRET`
X	`X_API_KEY`, `X_API_SECRET`, and optionally `X_URL`, `DISABLE_X_ANALYTICS`, `STRIP_LINKS_FROM_X_POSTS`
LinkedIn and LinkedIn Page	`LINKEDIN_CLIENT_ID`, `LINKEDIN_CLIENT_SECRET`
TikTok	`TIKTOK_CLIENT_ID`, `TIKTOK_CLIENT_SECRET`
TikTok Business	`TIKTOK_BUSINESS_CLIENT_ID`, `TIKTOK_BUSINESS_CLIENT_SECRET`
YouTube	`YOUTUBE_CLIENT_ID`, `YOUTUBE_CLIENT_SECRET`
Google Business Profile	`GOOGLE_GMB_CLIENT_ID`, `GOOGLE_GMB_CLIENT_SECRET`, or the YouTube client when unset
Pinterest	`PINTEREST_CLIENT_ID`, `PINTEREST_CLIENT_SECRET`
Reddit	`REDDIT_CLIENT_ID`, `REDDIT_CLIENT_SECRET`
Discord	`DISCORD_CLIENT_ID`, `DISCORD_CLIENT_SECRET`, `DISCORD_BOT_TOKEN_ID`
Slack	`SLACK_ID`, `SLACK_SECRET`
Telegram	`TELEGRAM_TOKEN`, `TELEGRAM_BOT_NAME`
Mastodon	`MASTODON_URL`, `MASTODON_CLIENT_ID`, `MASTODON_CLIENT_SECRET`
Tumblr	`TUMBLR_CLIENT_ID`, `TUMBLR_CLIENT_SECRET`
Twitch	`TWITCH_CLIENT_ID`, `TWITCH_CLIENT_SECRET`
Kick	`KICK_CLIENT_ID`, `KICK_SECRET`
VK	`VK_ID`
Dribbble	`DRIBBBLE_CLIENT_ID`, `DRIBBBLE_CLIENT_SECRET`
Whop	`WHOP_CLIENT_ID`
MeWe	`MEWE_HOST`, `MEWE_APP_ID`, `MEWE_API_KEY`
Farcaster	`NEYNAR_SECRET_KEY`, `NEYNAR_APP_FID`, `NEYNAR_APP_MNEMONIC`, and optionally `NEYNAR_SPONSOR_SIGNERS`
Skool	`EXTENSION_ID`, and optionally `EXTENSION_STORE_URL`: see Chrome extension

Kick’s secret is KICK_SECRET, and Dribbble’s variables are spelled with three b characters.

Farcaster

The channel connects through a Neynar managed signer, which the person approves by scanning a QR code in the Farcaster app. There is no redirect URI.

Variable	What it is
`NEYNAR_SECRET_KEY`	Your Neynar API key.
`NEYNAR_APP_FID`	The Farcaster ID of the account that represents your app. Without it and the next one, the connect stops with “Farcaster is not configured”.
`NEYNAR_APP_MNEMONIC`	The recovery phrase of that account’s wallet. It signs the signer requests. Keep it like a private key.
`NEYNAR_SPONSOR_SIGNERS`	`true` lets Neynar pay the signer fee from your Neynar credits. Otherwise the person pays it in the Farcaster app.
`NEYNAR_CLIENT_ID`	Only shows the Continue with Farcaster sign-in button. The channel does not use it.

NEYNAR_APP_FID, NEYNAR_APP_MNEMONIC and NEYNAR_SPONSOR_SIGNERS are not listed in the Compose file’s YAML; the .env file passes them through. Setup: Farcaster setup.

Hide or move a network

Variable	What it does
`HIDDEN_PROVIDERS`	Network identifiers to leave out of Add Channel, separated by commas, for example `tiktok,x`. Channels already connected keep working.
`MIGRATE_PROVIDERS`	`old:new` pairs, separated by commas, for example `tiktok:tiktok-business`. Reconnecting an `old` channel then runs the `new` network’s sign-in and moves the channel over, keeping its id, scheduled posts and settings. Facebook Page, Instagram through Facebook, LinkedIn Page, YouTube, Google Business Profile and Tumblr cannot be a target.

The identifier is the last part of the connect address, such as tiktok in /integrations/social/tiktok. The two are usually set together: hide the network you retire, and its channels move on their next reconnect.

MCP and OAuth apps

Details: MCP on your server.

Variable	What it does
`NEXT_PUBLIC_OVERRIDE_BACKEND_URL`	The base address MCP’s OAuth discovery advertises for the resource, the issuer and the token, registration and userinfo endpoints. Falls back to `NEXT_PUBLIC_BACKEND_URL`. Set it to a host that serves the backend at its root: see Split deployments.
`DCR_VERIFIED_DOMAINS`	Domains, separated by commas, that self-registering OAuth clients may send people back to. With a list, an `https` callback must be on a listed domain or a subdomain of one. `localhost` and app schemes such as `cursor://` are not checked. Unset, any `https` callback registers.
`OPENAI_OAUTH_CLIENT_ID`	The client id of a ChatGPT app you published. Turns on the `openid` and `email` scopes and the `/oauth/userinfo` endpoint, for that client and for self-registered clients whose callbacks are all on a `DCR_VERIFIED_DOMAINS` domain.
`OPENAI_APP_CHALLANGE`	The domain verification string OpenAI gives you, served at `/.well-known/openai-apps-challenge`. The misspelling is the name the code reads.
`MCP_ONLY`	Serves only MCP and its OAuth routes, for an instance that exists for that alone. The web app and the public API stop working on it.
`AGENT_API_KEY`	Secret for `POST /public/agent`, which turns a text brief into a post. Unset, the route refuses every request.
`ENTERPRISE_SECRET`	Key for a few provisioning routes used by reseller integrations. Unset, they refuse every request. If you set it, use a value of its own.

AI

Variable	What it does
`OPENAI_API_KEY`	Turns on the AI Copilot, AI images, the AI rewrite in the composer and the other OpenAI-backed features. Without it the Copilot answers “AI features are not configured on this installation.”
`TAVILY_API_KEY`	Gives the Copilot a web search tool. Optional.

Billing

A private install needs none of this: without both Stripe keys there is no billing and every workspace has every feature.

Variable	What it does
`STRIPE_PUBLISHABLE_KEY`, `STRIPE_SECRET_KEY`	Together they turn on plans, limits and checkout.
`STRIPE_SIGNING_KEY`	Signing secret of the Stripe webhook, which points at `NEXT_PUBLIC_BACKEND_URL` + `/payment/stripe`.
`STRIPE_DISCOUNT_ID`	A Stripe coupon offered as a win-back discount. Unset, none is offered.
`REVENUECAT_WEBHOOK_SECRET`, `REVENUECAT_SECRET_KEY`, `IN_APP_PURCHASE_REJECT_SANDBOX`	Subscriptions sold in a mobile app of your own through RevenueCat. The webhook points at `NEXT_PUBLIC_BACKEND_URL` + `/payment/revenuecat`.

Interface

Variable	What it does
`NEXT_PUBLIC_POLOTNO`	Polotno key for the design editor: see Design editor (Polotno).
`SUPPORT_EMAIL`	Where Contact support and Report a bug in the Help menu send mail. Without billing and without this, those two entries are hidden.
`CHANGELOG_URL`, `COMMUNITY_URL`	Add What’s new and Community links to the Help menu.
`LEGAL_URL`	Where the terms and privacy links point.
`REPOSITORY_URL`	Replaces the source code link in the interface.
`AFFILIATE_URL`	Adds an Affiliate entry to the user menu that opens this address. Only shown with billing on.
`AGENCY_NOTIFICATION_EMAIL`	Receives agency directory submissions.
`ONBOARDING_VIDEO_URL`	A video shown in the first-run experience.
`NEXT_PUBLIC_APP_VERSION`	The version label. Fixed when the image is built.
`CANVA_APP_ORIGIN`	Only if you run your own Canva app against this instance: its origin from the Canva Developer Portal (Security > Credentials), such as `https://app-xxxxxxxxxxx.canva-apps.com`. The backend allows it as a browser origin.
`DEV_BACKEND_PROXY`	Development only: the Next dev server proxies `/api` to this backend. Pair it with `NEXT_PUBLIC_BACKEND_URL=/api`.

Short links

Setup: Short links. The first one configured in this order wins: DUB_TOKEN (with DUB_API_ENDPOINT, DUB_SHORT_LINK_DOMAIN), SHORT_IO_SECRET_KEY, KUTT_API_KEY (with KUTT_API_ENDPOINT, KUTT_SHORT_LINK_DOMAIN), LINK_DRIP_API_KEY (with LINK_DRIP_API_ENDPOINT, LINK_DRIP_SHORT_LINK_DOMAIN). These add each new account’s email address to a mailing list you run. They have nothing to do with posting.

Variable	What it does
`BEEHIIVE_API_KEY`, `BEEHIIVE_PUBLICATION_ID`	Beehiiv. Used when the key is set.
`LISTMONK_DOMAIN`, `LISTMONK_USER`, `LISTMONK_API_KEY`, `LISTMONK_LIST_ID`, `LISTMONK_WELCOME_TEMPLATE_ID`	Listmonk, when Beehiiv is not set and `LISTMONK_API_KEY` is.
`RESEND_CONTACTS_API_KEY`, `RESEND_NEWS_SEGMENT_ID`, `RESEND_NEWS_TOPIC_ID`	Product news through Resend Broadcasts, used in place of the two above when all three are set. New accounts join the segment, and Settings > Notifications gets a switch for the news. The key needs full access: a sending-only key is not enough.

LISTMONK_* does not configure the Listmonk channel. The channel takes its server address and API user in the connect form: see Channel developer apps.

Analytics and error tracking

All optional.

Variable	What it does
`NEXT_PUBLIC_SENTRY_DSN`	Sends frontend and backend errors to Sentry.
`SENTRY_ENVIRONMENT`	The environment the backend and orchestrator report under, such as `production`. The Docker image sets no `NODE_ENV`, so without it events are filed as development.
`SENTRY_SPOTLIGHT`	`1` sends errors to a local Spotlight viewer instead. The Compose file’s `debug` profile runs one.
`SENTRY_AUTH_TOKEN`, `SENTRY_ORG`, `SENTRY_PROJECT`	Upload source maps when you build your own image.
`NEXT_PUBLIC_POSTHOG_KEY`, `NEXT_PUBLIC_POSTHOG_HOST`	PostHog product analytics.
`NEXT_PUBLIC_GTM_ID`	Google Tag Manager.
`NEXT_PUBLIC_FACEBOOK_PIXEL`, `FACEBOOK_PIXEL_ACCESS_TOKEN`	Meta Pixel and its server-side Conversions API.
`DATAFAST_API_KEY`, `DATAFAST_WEBSITE_ID`	Datafast analytics.
`DUB_PUBLISHABLE_KEY`	Dub’s click analytics in the browser, separate from short links.
`NEXT_PUBLIC_TRACKING_TRIAL`	Fires a conversion event when a trial starts. Only relevant with billing.

Listed in example files, but not read

These appear in the Compose file or .env.example and change nothing: FEE_AMOUNT, NX_ADD_PLUGINS, SLACK_SIGNING_SECRET, STRIPE_SIGNING_KEY_CONNECT, POSTQUEEN_OAUTH_URL and BACKEND_URL. MCP_URL is passed to the web app, but no page uses it: the MCP addresses on Connections come from NEXT_PUBLIC_BACKEND_URL.

Start here

Install

Domain and HTTPS

Configure

Channel developer apps

Operate

Develop

Required

Encryption keys

How switches are read

Background work

Storage and media

Limits and safety

Email

Networks

Farcaster

Hide or move a network

MCP and OAuth apps

AI

Billing

Interface

Short links

Analytics and error tracking

Listed in example files, but not read

​Required

​Encryption keys

​How switches are read

​Sign-up and sign-in

​Sign-in buttons

​Background work

​Storage and media

​Limits and safety

​Email

​Networks

​Farcaster

​Hide or move a network

​MCP and OAuth apps

​AI

​Billing

​Interface

​Short links

​Newsletter for new sign-ups

​Analytics and error tracking

​Listed in example files, but not read

​Related

Required

Encryption keys

How switches are read

Sign-up and sign-in

Sign-in buttons

Background work

Storage and media

Limits and safety

Email

Networks

Farcaster

Hide or move a network

MCP and OAuth apps

AI

Billing

Interface

Short links

Newsletter for new sign-ups

Analytics and error tracking

Listed in example files, but not read

Related