Skip to content
This documentation covers the kagent 1.0 alpha. For the latest 0.x release, see the 0.x docs.

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Environment variables

Page as Markdown

Look up the environment variables that each kagent component reads, including their types and defaults.

Review the environment variables that a kagent installation reads, grouped by the component that reads them.

Most of the following variables have a Helm chart setting that writes them for you, and the chart setting is the supported way to set them. Use a variable directly only whenever you run a component outside the cluster, such as kagent db against a database from your own machine, or when a variable has no chart setting.

Default values describe the component on its own. Helm, or an agent’s HarnessHarnessA Kubernetes custom resource defining how an agent is allowed to run: which harness executes the agent, its workload image, and its WorkerPool and snapshot storage. An Agent pairs it with the AgentTemplate that it runs.Learn more spec.env, might supply a different value, so the default listed here is not the guaranteed value that a running installation might use. (none) means the variable has no fixed default, so read the description for what happens when it is unset. A variable that more than one component reads appears under each of them.

Credentials, controller-generated runtime payloads, and internal process wiring are not configurable settings and are not listed.

Controller

The kagent controller reads these variables at startup. Helm writes most of them into the controller ConfigMap, so prefer the matching chart value where one exists. Set the variable directly only for a setting the chart does not expose. For the chart values, see the Helm reference.

VariableTypeDefaultDescription
KUBECONFIGString(none)Kubernetes client configuration file list. When unset, client-go uses its normal in-cluster or user kubeconfig discovery.
OTEL_EXPORTER_OTLP_CERTIFICATEString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATEString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_CLIENT_KEYString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_COMPRESSIONString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_ENDPOINTString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_HEADERSString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_LOGS_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_DEFAULT_HISTOGRAM_AGGREGATIONString(none)SDK histogram aggregation; defaults to base2_exponential_bucket_histogram.
OTEL_EXPORTER_OTLP_METRICS_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_PROTOCOLString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_TIMEOUTString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_TRACES_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_LOGS_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_METRICS_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_PROPAGATORSString(none)SDK propagator selection; defaults to tracecontext without baggage.
OTEL_RESOURCE_ATTRIBUTESString(none)Comma-separated key=value resource attributes. Override file attributes per key; compiler-owned runtime identity remains authoritative.
OTEL_SDK_DISABLEDString(none)Disable all SDK telemetry for this process when true.
OTEL_SERVICE_NAMEString(none)Override the SDK service name for this process.
OTEL_TRACES_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_TRACES_SAMPLERString(none)SDK trace sampler selection.
OTEL_TRACES_SAMPLER_ARGString(none)SDK trace sampler argument.

Agent runtime

The kagent controller supplies these variables to each agent runtime that it schedules. Setting one of them in a Harness spec.env does not override the controller on a managed runtime, because the controller writes its own value into every revision it compiles. The byo runtime is the exception because the controller sends it no configuration, so it reads whatever spec.env holds. For more information, see Agent harness.

VariableTypeDefaultDescription
ANTHROPIC_API_KEYString(none)API key for Anthropic.
AWS_ACCESS_KEY_IDString(none)AWS access key ID for IAM authentication with Bedrock.
AWS_BEARER_TOKEN_BEDROCKString(none)Bearer token for authentication with AWS Bedrock.
AWS_DEFAULT_REGIONString(none)Preferred region for Python Bedrock models and Go/Python Bedrock embeddings, before AWS_REGION and the us-east-1 fallback.
AWS_REGIONString(none)AWS region for Bedrock. Python Bedrock and Go Bedrock embeddings prefer AWS_DEFAULT_REGION, then AWS_REGION, then us-east-1.
AWS_SECRET_ACCESS_KEYString(none)AWS secret access key for IAM authentication with Bedrock.
AWS_SESSION_TOKENString(none)AWS session token for temporary/SSO credentials with Bedrock.
AZURE_AD_TOKENString(none)Azure Active Directory authentication token for Azure OpenAI.
AZURE_OPENAI_API_KEYString(none)API key for Azure OpenAI.
AZURE_OPENAI_ENDPOINTString(none)Endpoint URL for Azure OpenAI service.
FOUNDRY_API_KEYString(none)API key for Azure AI Foundry.
FOUNDRY_API_VERSIONString2024-10-21Azure AI Foundry OpenAI-compatible data-plane API version.
FOUNDRY_DEPLOYMENTString(none)Azure AI Foundry model deployment name.
FOUNDRY_ENDPOINTString(none)Endpoint URL for Azure AI Foundry or an Azure AI Services account.
GEMINI_API_KEYString(none)Fallback Gemini API key when GOOGLE_API_KEY is unset; supported by the CLI and Go/Python ADKs.
GOOGLE_API_KEYString(none)API key for Google Gemini.
GOOGLE_APPLICATION_CREDENTIALSString(none)Path to Google Cloud service account JSON key file.
GOOGLE_CLOUD_LOCATIONString(none)Google Cloud region/location for Vertex AI.
GOOGLE_CLOUD_PROJECTString(none)Google Cloud project ID for Vertex AI.
GOOGLE_CLOUD_REGIONString(none)Go ADK Vertex AI region fallback when GOOGLE_CLOUD_LOCATION is unset.
GOOGLE_GENAI_USE_VERTEXAIString(none)When set to ’true’, use Vertex AI for Gemini models.
MISTRAL_API_BASEString(none)Custom base URL for the Mistral AI API (defaults to https://api.mistral.ai/v1).
MISTRAL_API_KEYString(none)API key for Mistral AI.
OLLAMA_API_BASEString(none)Base URL for the Ollama API endpoint; falls back to http://localhost:11434 when model configuration and this variable are unset.
OLLAMA_API_KEYString(none)API key for Ollama Cloud. When set, a cloud-tagged model reaches api.ollama.com directly.
OPENAI_AGENTS_DISABLE_TRACINGBooleanfalseDisable OpenAI Agents SDK tracing, including the OpenTelemetry bridge.
OPENAI_API_BASEString(none)Custom base URL for the OpenAI API.
OPENAI_API_KEYString(none)API key for OpenAI. Upgrade tests fall back to a placeholder when unset or empty.
OPENAI_API_VERSIONString(none)Azure OpenAI API version. The Go and Python ADKs fall back to 2024-02-15-preview when model configuration and this variable are unset.
OPENAI_ORGANIZATIONString(none)OpenAI organization identifier.
OTEL_EXPORTER_OTLP_CERTIFICATEString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATEString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_CLIENT_KEYString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_COMPRESSIONString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_ENDPOINTString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_HEADERSString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_LOGS_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_LOGS_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_DEFAULT_HISTOGRAM_AGGREGATIONString(none)SDK histogram aggregation; defaults to base2_exponential_bucket_histogram.
OTEL_EXPORTER_OTLP_METRICS_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_METRICS_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_PROTOCOLString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_TIMEOUTString(none)Generic OTLP SDK override for this process, ahead of file defaults. Timeouts are milliseconds. Native SDK support varies.
OTEL_EXPORTER_OTLP_TRACES_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATEString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_CLIENT_KEYString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_COMPRESSIONString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_ENDPOINTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_HEADERSString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_PROTOCOLString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_OTLP_TRACES_TIMEOUTString(none)Signal-specific SDK override; takes precedence over generic OTLP environment settings and file defaults. Timeouts are milliseconds; HTTP endpoints include the signal path.
OTEL_EXPORTER_PROMETHEUS_HOSTString(none)Claude Code telemetry readiness listener host, managed by the harness.
OTEL_EXPORTER_PROMETHEUS_PORTString(none)Claude Code telemetry readiness listener port, managed by the harness.
OTEL_INSTRUMENTATION_GENAI_CAPTURE_MESSAGE_CONTENTString(none)Override runtime content capture: SPAN_ONLY enables prompts and responses; NO_CONTENT disables capture.
OTEL_LOGS_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_LOG_ASSISTANT_RESPONSESString(none)Claude Code response capture flag, managed by the harness content-capture configuration.
OTEL_LOG_RAW_API_BODIESString(none)Claude Code raw API body capture flag, managed by the harness captureRawAPIBodies configuration.
OTEL_LOG_TOOL_CONTENTString(none)Claude Code tool-content capture flag, managed by the harness content-capture configuration.
OTEL_LOG_TOOL_DETAILSString(none)Claude Code tool-detail capture flag, managed by the harness content-capture configuration.
OTEL_LOG_USER_PROMPTSString(none)Claude Code prompt capture flag, managed by the harness content-capture configuration.
OTEL_METRICS_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_PROPAGATORSString(none)SDK propagator selection; defaults to tracecontext without baggage.
OTEL_PYTHON_DISABLED_INSTRUMENTATIONSString(none)Python instrumentation entry point names to skip, such as httpx or openai.
OTEL_PYTHON_FASTAPI_EXCLUDED_URLSString(none)Python inbound HTTP paths left untraced; defaults exclude health and agent-card endpoints.
OTEL_RESOURCE_ATTRIBUTESString(none)Comma-separated key=value resource attributes. Override file attributes per key; compiler-owned runtime identity remains authoritative.
OTEL_SDK_DISABLEDString(none)Disable all SDK telemetry for this process when true.
OTEL_SEMCONV_STABILITY_OPT_INString(none)Python semantic convention opt-in; defaults to gen_ai_latest_experimental,http.
OTEL_SERVICE_NAMEString(none)Override the SDK service name for this process.
OTEL_TRACES_EXPORTERString(none)Override the file’s exporter selection for this process. none disables the signal; an endpoint or file exporter enables OTLP by default.
OTEL_TRACES_SAMPLERString(none)SDK trace sampler selection.
OTEL_TRACES_SAMPLER_ARGString(none)SDK trace sampler argument.
SAP_AI_CORE_CLIENT_IDString(none)OAuth2 client ID for SAP AI Core authentication.
SAP_AI_CORE_CLIENT_SECRETString(none)OAuth2 client secret for SAP AI Core authentication.

CLI

The kagent command line tool reads these variables from the environment that it runs in. Each one has an equivalent flag where the command takes a flag, and the flag wins when both are set.

VariableTypeDefaultDescription
ANTHROPIC_API_KEYString(none)API key for Anthropic.
AZURE_OPENAI_API_KEYString(none)API key for Azure OpenAI.
GEMINI_API_KEYString(none)Fallback Gemini API key when GOOGLE_API_KEY is unset; supported by the CLI and Go/Python ADKs.
GOOGLE_API_KEYString(none)API key for Google Gemini.
KUBECONFIGString(none)Kubernetes client configuration file list. When unset, client-go uses its normal in-cluster or user kubeconfig discovery.
OLLAMA_API_KEYString(none)API key for Ollama Cloud. When set, a cloud-tagged model reaches api.ollama.com directly.
OPENAI_API_KEYString(none)API key for OpenAI. Upgrade tests fall back to a placeholder when unset or empty.

UI

The UI container and the Vite development server read these variables. Values prefixed KAGENT_UI_ that reach the browser are public, so none of them can carry a secret.

VariableTypeDefaultDescription
KAGENT_UI_API_BASE_URLString/apiBrowser API base URL for UI containers and Vite development.
KAGENT_UI_BASE_PATHString(none)UI public path prefix, such as /ui; empty serves at the root. Applies in containers and Vite development; the container falls back to the root for invalid or reserved prefixes.
KAGENT_UI_DEV_CONTROLLER_URLStringhttp://127.0.0.1:8083Vite development proxy target for /api and /a2a; not sent to the browser.
KAGENT_UI_ENABLE_MOCKBooleanfalseServe the development UI from in-browser fixtures when true. Overrides backend settings; no user is signed in. Release bundles do not include the mock backend.
KAGENT_UI_EXTENSION_<NAME>String(none)UI extension settings forwarded to the browser at runtime. Each installed extension owns its keys and defaults; these values are public.
KAGENT_UI_SSO_REDIRECT_PATHString/oauth2/startUI path used by Sign in with SSO.
KAGENT_UI_STREAM_TIMEOUT_MSString1800000UI chat stream inactivity timeout in milliseconds. 0 disables the timeout. Applies in containers and Vite development.
KAGENT_UI_VITE_API_MODEString(none)Build-time API mode override, mock or live, used by UI tests. Overrides KAGENT_UI_ENABLE_MOCK; leave unset for normal development.
KAGENT_UI_VITE_EXAMPLE_EXTENSIONBooleanfalseBuild-time switch enabling the bundled example UI extension.