diff --git a/.env.e2e.example b/.env.e2e.example
new file mode 100644
index 0000000..b66a1cb
--- /dev/null
+++ b/.env.e2e.example
@@ -0,0 +1,16 @@
+# Peregrine E2E test harness credentials
+# Copy to .env.e2e and fill in real values — .env.e2e is gitignored
+
+HEIMDALL_ADMIN_TOKEN=changeme
+HEIMDALL_URL=http://localhost:8900
+
+# Cloud auth — Strategy A (preferred): Directus user/pass → fresh JWT per run
+E2E_DIRECTUS_EMAIL=e2e@circuitforge.tech
+E2E_DIRECTUS_PASSWORD=changeme
+E2E_DIRECTUS_URL=http://172.31.0.2:8055
+
+# Cloud auth — Strategy B (fallback): persistent JWT (uncomment to use)
+# E2E_DIRECTUS_JWT=changeme
+
+E2E_HEADLESS=true
+E2E_SLOW_MO=0
diff --git a/.gitignore b/.gitignore
index b165bf9..099f161 100644
--- a/.gitignore
+++ b/.gitignore
@@ -48,3 +48,4 @@ demo/seed_demo.py
 
 # Git worktrees
 .worktrees/
+.env.e2e