/**
 * MCP auth token derivation from config (key file or mnemonic).
 * Shared by server, CLI, and MCP clients so they use the same token.
 */
/**
 * Derive the MCP auth token from the same key source as data encryption.
 * Returns a token whenever a key source (NEOTOMA_KEY_FILE_PATH or
 * NEOTOMA_MNEMONIC) is available, regardless of whether data-at-rest
 * encryption is enabled. This lets operators use key-derived Bearer auth
 * through tunnels even without enabling full encryption.
 * Returns null only when no key source is configured.
 */
export declare function getMcpAuthToken(): string | null;
//# sourceMappingURL=mcp_auth_token.d.ts.map