---

4.1 Required keys ¶

These three must be set or the servlet refuses to load.

OWNSONA_API_TOKEN

The bearer token MCP clients must present in Authorization: Bearer <token>. Generate a long random string; openssl rand -hex 32 produces 64 hex chars and is more than enough.

EMBEDDING_API_KEY

The API key for the embeddings endpoint. Vendor-agnostic in name; in practice an OpenAI key today. If you swap providers, this is the key for the new provider.

EMBEDDING_DIMENSIONS

The vector length the active model produces. Must match the vector(N) column type in sql/001_init.sql. Mismatch fails every insert at the database with a vector-length error.