Fix description of the --otel-insecure flag (#1120)

Author: danbarr

cmd/thv-proxyrunner/app/run.go

@@ -174,7 +174,7 @@ func init() {
 	runCmd.Flags().StringArrayVar(&runOtelHeaders, "otel-headers", nil,
 		"OpenTelemetry OTLP headers in key=value format (e.g., x-honeycomb-team=your-api-key)")
 	runCmd.Flags().BoolVar(&runOtelInsecure, "otel-insecure", false,
-		"Disable TLS verification for OpenTelemetry endpoint")
+		"Connect to the OpenTelemetry endpoint using HTTP instead of HTTPS")
 	runCmd.Flags().BoolVar(&runOtelEnablePrometheusMetricsPath, "otel-enable-prometheus-metrics-path", false,
 		"Enable Prometheus-style /metrics endpoint on the main transport port")
 	runCmd.Flags().BoolVar(&runIsolateNetwork, "isolate-network", false,

cmd/thv/app/run.go

@@ -218,7 +218,7 @@ func init() {
 	runCmd.Flags().StringArrayVar(&runOtelHeaders, "otel-headers", nil,
 		"OpenTelemetry OTLP headers in key=value format (e.g., x-honeycomb-team=your-api-key)")
 	runCmd.Flags().BoolVar(&runOtelInsecure, "otel-insecure", false,
-		"Disable TLS verification for OpenTelemetry endpoint")
+		"Connect to the OpenTelemetry endpoint using HTTP instead of HTTPS")
 	runCmd.Flags().BoolVar(&runOtelEnablePrometheusMetricsPath, "otel-enable-prometheus-metrics-path", false,
 		"Enable Prometheus-style /metrics endpoint on the main transport port")
 	runCmd.Flags().StringArrayVar(&runOtelEnvironmentVariables, "otel-env-vars", nil,

docs/cli/thv_run.md

@@ -73,7 +73,7 @@ thv run \
 | `--otel-service-name` | Service name for telemetry | `toolhive-mcp-proxy` |
 | `--otel-sampling-rate` | Trace sampling rate (0.0-1.0) | `0.1` (10%) |
 | `--otel-headers` | Authentication headers (key=value format) | None |
-| `--otel-insecure` | Disable TLS verification | `false` |
+| `--otel-insecure` | Connect using HTTP instead of HTTPS | `false` |
 | `--otel-enable-prometheus-metrics-path` | Enable Prometheus `/metrics` endpoint on main transport port | `false` (disabled) |
 | `--otel-env-vars` | Environment variable names to include as span attributes (comma-separated) | None |
 
@@ -497,7 +497,6 @@ Control trace volume and costs with sampling:
 - Verify OTLP endpoint URL and authentication headers
 - Check network connectivity to the endpoint
 - Ensure sampling rate is not too low
-- Verify TLS configuration with `--otel-insecure` for testing
 
 **Prometheus metrics not available**:
 - Confirm `--otel-enable-prometheus-metrics-path` is set

docs/observability.md

@@ -45,7 +45,7 @@ type Config struct {
 	// Headers contains authentication headers for the OTLP endpoint
 	Headers map[string]string
 
-	// Insecure indicates whether to disable TLS verification
+	// Insecure indicates whether to use HTTP instead of HTTPS for the OTLP endpoint
 	Insecure bool
 
 	// EnablePrometheusMetricsPath controls whether to expose Prometheus-style /metrics endpoint