Fixes #5011 : Document bearer_token_env_var for streamable HTTP

2026-05-01 18:06:47 +00:00 · 2025-10-10 13:43:44 -07:00
1 changed files with 5 additions and 3 deletions
--- a/docs/config.md
+++ b/docs/config.md
@@ -370,9 +370,11 @@ API_KEY = "value"
 experimental_use_rmcp_client = true
 [mcp_servers.figma]
 url = "https://mcp.linear.app/mcp"
-# Optional bearer token to be passed into an `Authorization: Bearer <token>` header
-# Use this with caution because the token is in plaintext and can be read by Codex itself.
-bearer_token = "<token>"
+# Optional: set `bearer_token_env_var` to the name of an environment variable whose
+# value should be passed into an `Authorization: Bearer <token>` header.
+# Export the environment variable before launching Codex so the MCP client can read it.
+# (Inline `bearer_token` values are no longer supported.)
+bearer_token_env_var = "FIGMA_MCP_TOKEN"
 ```

 For oauth login, you must enable `experimental_use_rmcp_client = true` and then run `codex mcp login server_name`