diff --git a/.env.example b/.env.example
index e6a4786..ed5d59e 100644
--- a/.env.example
+++ b/.env.example
@@ -41,6 +41,10 @@ export GITHUB_REPO="OSVauco"
 export GITHUB_APP_INSTALLATION_ID=""   # eks: 12345678
 
 # ── Observability ────────────────────────────────────────────
+# OPAX-MCP authentication key from Secret Manager
+# Mount in Cloud Run via --update-secrets=MCP_SECRET=mcp-server-key:latest
+MCP_SECRET=<from-secret-manager>
+
 # ALERT_EMAIL er allerede satt ovenfor
 
 # ── Billing IAM Hardening (11-billing-iam-hardening.sh) ─────────────