mcp connection

.env.example

@@ -31,6 +31,25 @@ HTTP_SHUTDOWN_TIMEOUT=10s
 # Origins are matched exactly, echoed back one at a time, and "*" is rejected.
 # HTTP_CORS_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
 
+# Networks whose X-Forwarded-For header may be believed. Comma-separated CIDR
+# blocks or bare addresses; both IP families accepted.
+#
+# Several limits are keyed by the caller's address: failed logins, OAuth client
+# registration, and OAuth authorization before sign-in. Behind a reverse proxy
+# every request arrives FROM the proxy, so without this setting those budgets
+# describe the proxy rather than the caller and every user shares one — one
+# person retrying a connector exhausts everybody's allowance.
+#
+# Unset means no proxy is trusted and the header is ignored entirely, which is
+# correct for local development: nothing sits in front of the dev server. Leave
+# it unset here. A misspelt value cannot open a hole — it only restores the
+# shared bucket — but a malformed entry stops startup rather than being dropped.
+#
+# NEVER set this to 0.0.0.0/0. That trusts every caller's own header, which is
+# not a weaker limit but no limit at all: anyone could mint a fresh budget per
+# request simply by changing the value they send.
+# HTTP_TRUSTED_PROXIES=
+
 # ── PostgreSQL ──────────────────────────────────────────────────────────────
 # The local development database. DATABASE_NAME is mixed-case and hyphenated,
 # so anything that interpolates it into SQL must quote it: "Krow-force".