Required credentials
Google OAuth client ID for user signup/login.
Google OAuth client secret for the callback token exchange.
Secret used to sign the local session cookie.
Stripe or Razorpay configuration for checkout and verified payment webhooks.
Needed for Hetzner Cloud API. Current code only performs read-only connection tests.
Needed for future OpenAI-backed server operations. Not used by current MCP smoke path.
Self-hosted bapXvm backend URL inside the user AVM or staging environment.
Optional admin API key for bapXvm metadata/docs calls.