docs/reference/env.md

Environment variables

The full list with comments is packages/core/.env.example; the schema is packages/core/src/libs/Env.ts. NEXT_PUBLIC_* values are baked in at build time.

Core

VariableDefaultPurpose
DATABASE_URL— (required)Postgres 16 with pgvector
AUTH_SECRET— (required)Signs sessions. openssl rand -base64 32
NEXT_PUBLIC_APP_URLhttp://localhost:3000The public URL (build time)
WORKSPACE_PATH—The workspace directory; unset means none configured
WORKSPACE_TEMPLATE_VARS—Names allowed in {{env.NAME}} tokens
VOCION_ENFORCE_WORKSPACE_ACCESSoff1: membership and groups gate shared workspaces

Durable executor

VariableDefaultPurpose
VOCION_SCHEDULE_OWNERoff1 on exactly one process: fires schedules, runs housekeeping
DURABLE_EXECUTORonoff disables the executor in this process
DURABLE_MODE—memory for an in-memory executor in development

Models and retrieval

VariableDefaultPurpose
VOCION_LLM_PROVIDERanthropicanthropic, openai, bedrock
VOCION_LLM_PROVIDER_<ROLE> / VOCION_LLM_MODEL_<ROLE>—Per role: MAIN, CLASSIFIER, EMBEDDER, SKILLTURN, EXTRACTOR
ANTHROPIC_API_KEY, OPENAI_API_KEY—Server-level keys; a workspace's stored key is used first
AWS_REGION, AWS_BEARER_TOKEN_BEDROCK—Bedrock (or any AWS SDK credential)
VOCION_EMBEDDING_PROVIDERfollows the LLM provider; OpenAI when that is Anthropicopenai or bedrock
VOCION_EMBEDDING_MODELtext-embedding-3-smallEmbedding model (1536 dimensions)
VOCION_RERANK_MODELclaude-haiku-4-5-20251001Rerank pass
VOCION_PROMPT_CACHEon0 disables prompt caching

Agent execution (AgentCore)

VariableDefaultPurpose
VOCION_AGENT_RUNTIME_ARN—The AgentCore runtime
VOCION_AGENTCORE_REGIONus-west-2Its region
VOCION_AGENTCORE_MEMORY_ID—AgentCore Memory
VOCION_TOOL_ENDPOINT_URL—Where the runtime calls tools back; must be reachable from AWS
VOCION_DEFAULT_RUNS_ON—Default harness.runsOn
VOCION_DISABLE_AGENTCORE, VOCION_DISABLE_RUNTIME—1 forces turns in-process

Workers and runners

VariablePurpose
VOCION_EXTERNAL_WORKERS1 enables worker runs
VOCION_RUNNERS / VOCION_RUNNERS_FILERunner targets (JSON)
VOCION_RUNNER_TOKENShared by the app and its runners
VOCION_RUNNER_IMAGEPin to ghcr.io/vocion/vocion-runner:sha-<commit> or :5.x

Security

VariableDefaultPurpose
VOCION_CREDENTIAL_VAULTlocallocal or kms
VOCION_CREDENTIAL_VAULT_KEY—Wrapping key for local; required in production
VOCION_KMS_KEY_ARN—KMS key for kms
VOCION_TOOL_SIGNING_SECRETAUTH_SECRETSigns tool claims and share links; set separately
VOCION_ARTIFACTS_DIR.artifactsPrivate directory for artifact files

Tools

VariableDefault
VOCION_WEBSEARCH_PROVIDERtavily (or brave)
VOCION_BROWSE_PROVIDERbuiltin
VOCION_IMAGE_PROVIDERopenai
VOCION_CODE_PROVIDERbuiltin (or e2b)

Channels and connectors

VariablePurpose
VOCION_SLACK_EVENTS, SLACK_SIGNING_SECRET, SLACK_BOT_TOKEN, SLACK_BOT_USER_IDSlack in threads
TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKENTexting your assistant
RESEND_API_KEY, VOCION_MAIL_FROM, VOCION_MAIL_ENABLED, VOCION_EMAIL_SURFACE, VOCION_MAIL_DOMAINOutbound and inbound mail
GOOGLE_OAUTH_CLIENT_ID/SECRET, SLACK_CLIENT_ID/SECRET, ATLASSIAN_…, HUBSPOT_…, NOTION_…, ZOOM_…, APOLLO_…, GITHUB_APP_CLIENT_ID/SECRETServer-level vendor login apps (a workspace's own login app wins)
VAPID_PUBLIC_KEY, VAPID_PRIVATE_KEY, VAPID_SUBJECTWeb push

Observability

VariablePurpose
LANGFUSE_ENABLEDtrue / false; see Observability
LANGFUSE_BASE_URL, LANGFUSE_PUBLIC_KEY, LANGFUSE_SECRET_KEY, LANGFUSE_PROJECT_IDLangfuse
LANGFUSE_RETENTION_DAYSDefault 365
NEXT_PUBLIC_SENTRY_DSNSentry
NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN, NEXT_PUBLIC_BETTER_STACK_INGESTING_HOSTBetter Stack logs

Branding (build time)

NEXT_PUBLIC_BRAND_NAME, NEXT_PUBLIC_BRAND_TAGLINE, NEXT_PUBLIC_BRAND_MARK, NEXT_PUBLIC_BRAND_LOCKUP.

Local MCP server

VOCION_ORG_ID, VOCION_MCP_AGENT_SLUG, WORKSPACE_AUTO_APPLY, WORKSPACE_AUTO_COMMIT, VOCION_PLUGINS.