# The base URL of your wacrm instance (no trailing slash).
WACRM_BASE_URL=https://your-crm.example.com

# A wacrm API key. Create one in the dashboard:
#   Settings → API keys → New API key.
# The key's scopes decide what the server can do — grant the minimum.
WACRM_API_KEY=wacrm_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# --- Write guards (opt-in) ------------------------------------------
# By default the server is READ-ONLY: it never exposes tools that
# change data or send messages, no matter what the API key allows.
# Turn these on deliberately.

# Expose contact create/update and single-message sending.
# WACRM_ENABLE_WRITES=true

# Expose the broadcast tool (mass sends — highest risk). Requires
# WACRM_ENABLE_WRITES as well.
# WACRM_ENABLE_BROADCASTS=true