scout/example.env at main · agno-agi/scout · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# ---------------------------------------------------------------------------
# Required — OpenAI powers every agent and embeddings
# ---------------------------------------------------------------------------
OPENAI_API_KEY=sk-***

# ---------------------------------------------------------------------------
# AgentOS scheduler base URL. Defaults to http://127.0.0.1:8000 — override
# when Scout is reachable at a non-localhost address.
# ---------------------------------------------------------------------------
# AGENTOS_URL=http://127.0.0.1:8000

# ---------------------------------------------------------------------------
# Production — JWT verification for AgentOS RBAC.
# Scout enables RBAC whenever RUNTIME_ENV=prd (the default outside dev).
# Without this key, prod refuses to serve traffic. Generate the keypair
# at os.agno.com (Settings → key pair) after your first deploy fails.
# Paste the full PEM block, no surrounding quotes. See README → Deploy.
# Set `authorization=False` in app/main.py to opt out (not recommended).
# ---------------------------------------------------------------------------
# JWT_VERIFICATION_KEY=-----BEGIN PUBLIC KEY-----
# MIIBIjANBgkq...
# -----END PUBLIC KEY-----

# ---------------------------------------------------------------------------
# Web research — `WebContextProvider` is on by default (zero config).
# Backend selection:
#   PARALLEL_API_KEY set  →  ParallelBackend (Parallel SDK, web_search + web_extract)
#   unset                 →  ParallelMCPBackend (keyless via Parallel's public MCP)
# ---------------------------------------------------------------------------
# PARALLEL_API_KEY=

# ---------------------------------------------------------------------------
# Google Drive context — Scout reads Drive as its own service-account
# identity. Run ./scripts/google_setup.sh to provision it, then share the
# folders you want Scout to see with the service account email. The script
# writes the key to <repo>/.scout/service-account.json by default — a
# relative path works on both host and inside Docker.
# Setup: docs/GDRIVE_CONNECT.md
# ---------------------------------------------------------------------------
# GOOGLE_SERVICE_ACCOUNT_FILE=.scout/service-account.json

# ---------------------------------------------------------------------------
# Database — defaults match docker compose
# ---------------------------------------------------------------------------
# DB_HOST=localhost
# DB_PORT=5432
# DB_USER=ai
# DB_PASS=ai
# DB_DATABASE=ai
# DB_DRIVER=postgresql+psycopg

# ---------------------------------------------------------------------------
# Slack — set both to make Scout available in Slack (see docs/SLACK_CONNECT.md).
# SLACK_BOT_TOKEN alone also activates the Slack context provider (read-only
# workspace search, channel history, thread expansion).
#   SLACK_BOT_TOKEN       Bot User OAuth Token (xoxb-***)
#   SLACK_SIGNING_SECRET  Signing Secret (Basic Information → App Credentials)
# ---------------------------------------------------------------------------
# SLACK_BOT_TOKEN=
# SLACK_SIGNING_SECRET=

# ---------------------------------------------------------------------------
# Knowledge wiki — Git backend (optional). Filesystem by default; set
# these to swap to a real Git repo with audit trail. Mint a fine-grained
# PAT scoped to ONE repo (Contents: Read and write). Then update
# `_create_knowledge_wiki()` in scout/contexts.py — see docs/WIKI_GIT.md.
# ---------------------------------------------------------------------------
# WIKI_REPO_URL=https://github.com/your-org/your-wiki.git
# WIKI_GITHUB_TOKEN=github_pat_***
# WIKI_BRANCH=main
# WIKI_LOCAL_PATH=/var/lib/scout/wiki

# ---------------------------------------------------------------------------
# MCP servers — wired in scout/contexts.py. Secrets that MCP servers need
# (API keys, bearer tokens, etc.) live here and are read inside the provider
# construction. Setup: docs/MCP_CONNECT.md
# ---------------------------------------------------------------------------
# LINEAR_API_KEY=