KITSUNE_CAPS |
core |
Comma-separated capability groups; all enables every group except storage and history, which read personal data and must be named |
KITSUNE_PUBLISH |
KITSUNE_CAPS |
Groups of the enabled tools that tools/list shows when a session starts; the others stay reachable through the gateway tools. See Finding tools without a restart |
KITSUNE_MODE |
act |
Task surface and per-request policy: read, draft, or act. See Task modes |
KITSUNE_HOME |
~/.kitsune |
Data directory (0700) |
KITSUNE_HTTP_PORT |
47651 |
Bridge HTTP API |
KITSUNE_WS_PORT |
47652 |
Extension WebSocket. Change WS_URL in extension/background/background.js too |
KITSUNE_TOKEN |
— |
Override the token in ~/.kitsune/token |
KITSUNE_EXTENSION_DIR |
extension/ in a checkout |
Unpacked extension the bridge compares a developer build with, to report one that was edited but not reloaded, and whose WS_URL port it expects before the extension connects (Connection diagnosis) |
KITSUNE_NO_BRIDGE_RESTART |
Unset |
Set to 1 in the MCP server environment to skip automatic replacement of an outdated bridge |
KITSUNE_BRIDGE_IDLE_TIMEOUT |
0 (never) |
Seconds without client activity before the bridge exits; see Idle shutdown |
KITSUNE_OUTPUT_DIR |
Unset |
Directory, in the MCP server environment, for relative filename arguments of the core tools; unset, they resolve against the client's first root, else the server's working directory (see Core tools) |
KITSUNE_OWNER_ID |
The MCP client's process |
Tab owner id of the MCP client, in the MCP server environment: the bridge records the tabs it opens as this client's and offers them after a server restart. Up to 64 letters, digits, ., _, : or -. Set it when the server runs through a launcher other than uv or uvx, such as a shell script or a Python wrapper. Give each MCP client its own value: clients with the same value share their tabs. See Tab owners |
KITSUNE_USER_TABS |
read-only |
Set to writable to allow this client to write user tabs; see Protecting your tabs for values and invalid-value errors |
KITSUNE_ASK_BEFORE_ACT |
Unset |
Set to 1 in the MCP server environment to start the bridge with ask-before-act locked on; the lock then persists in ask-before-act-locked under KITSUNE_HOME |
KITSUNE_HISTORY_ALLOW_DOMAINS |
Unset (every domain) |
Bridge: comma-separated domains (with subdomains) the history tools may return; see History and bookmarks |
KITSUNE_HISTORY_DENY_DOMAINS |
Unset (none) |
Bridge: comma-separated domains (with subdomains) the history tools never return; wins over the allow list |
KITSUNE_HISTORY_MAX_DAYS |
30 |
Bridge: how many days back the history tools may look. browser_set_policy can only tighten these three |
KITSUNE_POST_ACTION_SNAPSHOT |
Enabled (deltas) |
Set to 0 in the bridge daemon environment and restart it to disable automatic post-action snapshots, full to return full snapshots instead of deltas, or text to add readable text lines to them |