---

4.1 Required keys ¶

These must be set or the servlet refuses to load.

OWNSONA_LOGIN_USERNAME

Username the OAuth AS consent page accepts. You invent this — it is unrelated to any external account. Typed into a browser tab when an MCP client first connects to your server; never sent to or from any external service.

OWNSONA_LOGIN_PASSWORD

Password paired with OWNSONA_LOGIN_USERNAME. Same notes apply: you invent it, it lives only in this file and in OwnsonaUserAuthenticator, and it’s typed only into the AS consent page.

EMBEDDING_API_KEY

The API key for the embeddings endpoint. Vendor-agnostic in name; in practice an OpenAI key today. If you swap providers, this is the key for the new provider.

EMBEDDING_DIMENSIONS

The vector length the active model produces. Must match the vector(N) column type in sql/001_init.sql. Mismatch fails every insert at the database with a vector-length error.