Documentation navigation

Environment variables

Copy .env.example to .env for local development.

VariablePurpose
DATABASE_URLMetadata and runtime storage
ENVIRONMENTActive environment policy
SECRET_KEYCredential encryption key
MCP_API_KEYOptional Bearer key for /mcp
MCP_MANAGED_POLICY_JSONManaged MCP command and package allowlist
ORCHETREE_HOMELocal cache and temporary-data root
CORS_ALLOWED_ORIGINSAllowed browser origins

Provider credentials should be stored as encrypted AI connections. Environment keys can seed selected default connections in self-hosted deployments.

Never commit .env, production keys, database credentials, or exported bundles containing private operational data.