Supernova — Secrets Template

Copy this file to .env (which is gitignored) and fill in values.

See _System/SecretsRegistry.md for full descriptions of each var,

how to obtain it, and the scopes / permissions required.

NEVER commit .env to git. NEVER paste secrets into agent/skill/wiki files.

============================================================

Active integrations — Anthropic-hosted MCP, NO keys needed here

============================================================

Gmail, Google Calendar, Google Drive auth via:

mcp__claude_ai_{Gmail|Google_Calendar|Google_Drive}__authenticate

Tokens live in the Anthropic MCP service. Cached state at

~/.claude/mcp-needs-auth-cache.json.

============================================================

Deferred integrations — fill in when wiring these up

============================================================

--- Slack ---

Get from https://api.slack.com/apps → your app → OAuth & Permissions

Bot token (starts with xoxb-)

SLACK_BOT_TOKEN=

--- Asana ---

Get from https://app.asana.com/0/my-apps → Personal access tokens

ASANA_PERSONAL_ACCESS_TOKEN=

--- Whoop (only when API integration replaces file-drop) ---

Get from https://developer.whoop.com → Apps → Create app

WHOOP_CLIENT_ID= WHOOP_CLIENT_SECRET=

--- NotebookLM (Phase 2 — when notebooklm-py is installed) ---

Auth via notebooklm login (browser OAuth via Playwright). The library

writes a session file; this var lets you override its location.

Default: ~/.notebooklm-py/session.json

NOTEBOOKLM_SESSION_PATH=~/.notebooklm-py/session.json

============================================================

Future / optional

============================================================

Anthropic API — only needed if building outside Claude Code

(e.g., Agent SDK app, standalone scripts).

ANTHROPIC_API_KEY=

============================================================

Per-brand secrets — naming pattern

============================================================

Format: {SERVICE}{TOKEN_TYPE}{BRAND_SLUG_UPPERCASE}

Examples (uncomment + rename when needed):

SHOPIFY_ACCESS_TOKEN_BRAND_A=

META_ADS_TOKEN_BRAND_B=

GOOGLE_ADS_CUSTOMER_ID_BRAND_A=