Environment variables
Copy .env.example to .env for local development.
| Variable | Purpose |
|---|---|
DATABASE_URL | Metadata and runtime storage |
ENVIRONMENT | Active environment policy |
SECRET_KEY | Credential encryption key |
MCP_API_KEY | Optional Bearer key for /mcp |
MCP_MANAGED_POLICY_JSON | Managed MCP command and package allowlist |
ORCHETREE_HOME | Local cache and temporary-data root |
CORS_ALLOWED_ORIGINS | Allowed browser origins |
Provider credentials should be stored as encrypted AI connections. Environment keys can seed selected default connections in self-hosted deployments.
Never commit .env, production keys, database credentials, or exported bundles
containing private operational data.