# Kottos — Secrets
# Managed by Ansible. Values fetched from OCI Vault at deploy time.
# Merges with fastagent.config.yaml (secrets take precedence).

openai:
  api_key: "{{ kottos_openai_api_key }}"

anthropic:
  api_key: "{{ kottos_anthropic_api_key }}"

mcp:
  servers:
    # Per-agent Kernos MCP bearer tokens so Kernos can distinguish callers.
    # Kottos itself does not consume these — they are surfaced to each agent
    # module via fast-agent's server auth headers below.
    argus:
      headers:
        Authorization: "Bearer {{ scotty_kernos_mcp_token }}"
    andromeda:
      headers:
        Authorization: "Bearer {{ harper_kernos_mcp_token }}"
    korax:
      headers:
        Authorization: "Bearer {{ case_kernos_mcp_token }}"

    # Downstream MCP bearer tokens
    arke:
      headers:
        Authorization: "Bearer {{ kottos_arke_mcp_token }}"
    mnemosyne:
      headers:
        Authorization: "Bearer {{ mnemosyne_kottos_token }}"
    github:
      env:
        GITHUB_PERSONAL_ACCESS_TOKEN: "{{ kottos_github_pa_token }}"