Skip to content

Document .env discovery improvements#626

Merged
EricGustin merged 5 commits intomainfrom
ericgustin/secrets
Feb 26, 2026
Merged

Document .env discovery improvements#626
EricGustin merged 5 commits intomainfrom
ericgustin/secrets

Conversation

@EricGustin
Copy link
Member

@EricGustin EricGustin commented Jan 5, 2026

Documentation for ArcadeAI/arcade-mcp#737


Note

Low Risk
Documentation-only changes that adjust recommended .env file placement and wording; no runtime or API behavior is modified.

Overview
Updates the MCP server quickstart and tool guides to document Arcade’s upward .env discovery, changing instructions to place .env/.env.example at the project root and adjusting example commands accordingly (including the mv path when working from src/my_server/).

Aligns deployment docs to say Arcade Deploy searches for a .env file (not just the current directory), fixes minor formatting around .env, and refreshes the generated public markdown copies (including Last updated dates).

Written by Cursor Bugbot for commit 9ac8846. This will update automatically on new commits. Configure here.

@vercel
Copy link

vercel bot commented Jan 5, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview, Comment Feb 26, 2026 7:40am

Request Review

@vfanelle
Copy link
Contributor

vfanelle commented Feb 3, 2026

@ArcadeAI/engineering can someone stamp this?

Copy link
Contributor

@evantahler evantahler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@EricGustin approved assuming this is still valid!

@EricGustin
Copy link
Member Author

It's still valid, but I need to get back around to addressing a comment on the code PR. Changing this to DRAFT for now

@EricGustin EricGustin marked this pull request as draft February 4, 2026 00:41
EricGustin added a commit to ArcadeAI/arcade-mcp that referenced this pull request Feb 26, 2026
Resolves TOO-201

Documentation PR for this is here:
ArcadeAI/docs#626


<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Changes how environment variables/secrets are discovered and loaded,
which can subtly alter runtime behavior depending on directory structure
and existing env vars; bounded traversal and added tests reduce but
don’t eliminate this risk.
> 
> **Overview**
> **Improves `.env` discovery across the MCP server and CLI.** Adds
`find_env_file()` (bounded by the nearest `pyproject.toml` by default)
and switches settings loading, `arcade deploy`, `arcade configure` stdio
env injection, and provider API-key resolution to use it.
> 
> Updates dev reload to also watch the discovered `.env` even when it
lives outside the current working directory, adjusts `deploy --secrets
all` to only run when a `.env` was found, and moves the minimal
scaffold’s `.env.example` to the project root with updated
tests/integration checks. Version bumps align examples and top-level
deps with `arcade-mcp-server` `1.17.4` and `arcade-mcp` `1.11.2`.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
40cff17. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
@EricGustin EricGustin marked this pull request as ready for review February 26, 2026 07:24
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Style Review

Found 1 style suggestion(s).

Powered by Vale + Claude

@@ -206,7 +206,7 @@ When your tool is executed, it will return: `"Got SECRET_KEY of length..."`. In
## Key Concepts

- **Secure Access:** Secrets are accessed through context, not imported directly
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Google.Passive: Changed passive voice 'are accessed' to active voice 'access'

Suggested change
- **Secure Access:** Secrets are accessed through context, not imported directly
- **Secure Access:** Secrets access through context, not imported directly

@EricGustin EricGustin enabled auto-merge (squash) February 26, 2026 07:38
@EricGustin EricGustin merged commit 1594b0f into main Feb 26, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants