> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lyzr.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Environment Variables

> All supported environment variables and their defaults.

GitAgent reads configuration from environment variables for LLM provider credentials, git access, integrations, and runtime behavior. This page lists every supported variable, grouped by area.

## LLM Provider API Keys

| Variable             | Default | Description                                    |
| -------------------- | ------- | ---------------------------------------------- |
| `ANTHROPIC_API_KEY`  | —       | API key for Anthropic Claude models            |
| `OPENAI_API_KEY`     | —       | API key for OpenAI models (also used for Lyzr) |
| `GOOGLE_API_KEY`     | —       | API key for the `google:` text model provider  |
| `GEMINI_API_KEY`     | —       | API key for Gemini Live voice mode             |
| `GROQ_API_KEY`       | —       | API key for Groq                               |
| `XAI_API_KEY`        | —       | API key for xAI Grok models                    |
| `MISTRAL_API_KEY`    | —       | API key for Mistral models                     |
| `OPENROUTER_API_KEY` | —       | API key for OpenRouter (multi-provider proxy)  |
| `CEREBRAS_API_KEY`   | —       | API key for Cerebras                           |
| `DEEPSEEK_API_KEY`   | —       | API key for DeepSeek                           |
| `LYZR_API_KEY`       | —       | Lyzr AI Studio API key                         |

## Azure OpenAI

| Variable                           | Default | Description                                    |
| ---------------------------------- | ------- | ---------------------------------------------- |
| `AZURE_OPENAI_API_KEY`             | —       | API key for Azure OpenAI                       |
| `AZURE_OPENAI_BASE_URL`            | —       | Your Azure OpenAI endpoint URL                 |
| `AZURE_OPENAI_RESOURCE_NAME`       | —       | Azure resource name (alternative to BASE\_URL) |
| `AZURE_OPENAI_API_VERSION`         | v1      | Azure OpenAI API version                       |
| `AZURE_OPENAI_DEPLOYMENT_NAME_MAP` | —       | Map model IDs to Azure deployment names        |

## Amazon Bedrock

| Variable                   | Default | Description                                           |
| -------------------------- | ------- | ----------------------------------------------------- |
| `AWS_ACCESS_KEY_ID`        | —       | AWS access key ID for Bedrock                         |
| `AWS_SECRET_ACCESS_KEY`    | —       | AWS secret access key for Bedrock                     |
| `AWS_REGION`               | —       | AWS region (e.g. us-east-1)                           |
| `AWS_DEFAULT_REGION`       | —       | Fallback AWS region if AWS\_REGION is not set         |
| `AWS_PROFILE`              | —       | Use a named AWS credentials profile instead of keys   |
| `AWS_BEARER_TOKEN_BEDROCK` | —       | Bearer token for Bedrock (alternative to access keys) |

## Google Vertex AI

| Variable                         | Default | Description                                                        |
| -------------------------------- | ------- | ------------------------------------------------------------------ |
| `GOOGLE_APPLICATION_CREDENTIALS` | —       | Path to GCP service account JSON (Application Default Credentials) |
| `GOOGLE_CLOUD_PROJECT`           | —       | GCP project ID (required for Vertex AI)                            |
| `GOOGLE_CLOUD_LOCATION`          | —       | GCP region/location (required for Vertex AI)                       |
| `GOOGLE_CLOUD_API_KEY`           | —       | API key alternative to ADC for Vertex AI                           |
| `GCLOUD_PROJECT`                 | —       | Fallback for GOOGLE\_CLOUD\_PROJECT                                |

## Cloudflare Workers AI

| Variable                | Default | Description                                                 |
| ----------------------- | ------- | ----------------------------------------------------------- |
| `CLOUDFLARE_API_KEY`    | —       | Cloudflare Workers AI API key                               |
| `CLOUDFLARE_ACCOUNT_ID` | —       | Cloudflare account ID (used in the Workers AI endpoint URL) |

## Git & Repositories

| Variable       | Default | Description                                                |
| -------------- | ------- | ---------------------------------------------------------- |
| `GITHUB_TOKEN` | —       | GitHub PAT for --repo mode (also falls back to GIT\_TOKEN) |
| `GIT_TOKEN`    | —       | Alternative PAT fallback for --repo mode                   |

## Integrations & Tools

| Variable             | Default | Description                                        |
| -------------------- | ------- | -------------------------------------------------- |
| `E2B_API_KEY`        | —       | API token read by the E2B SDK when using --sandbox |
| `COMPOSIO_API_KEY`   | —       | Composio integrations API key                      |
| `TELEGRAM_BOT_TOKEN` | —       | Telegram bot token from @BotFather                 |
| `SKILLSMP_API_KEY`   | —       | SkillsMP marketplace API key for skill discovery   |

## Runtime & Config

| Variable                  | Default | Description                                                 |
| ------------------------- | ------- | ----------------------------------------------------------- |
| `GITAGENT_MODEL_BASE_URL` | —       | Custom OpenAI-compatible base URL                           |
| `GITAGENT_USERNAME`       | admin   | Username for web UI login (companion to GITAGENT\_PASSWORD) |
| `GITAGENT_PASSWORD`       | —       | Password for web UI authentication                          |
| `GITAGENT_ENV`            | —       | Selects which `config/<env>.yaml` to load                   |

<Note>
  Never commit API keys or tokens to your agent repo. Set these as environment variables or store them in a `.env` file excluded from version control.
</Note>

<CardGroup cols={2}>
  <Card title="Models & Providers" icon="cpu" href="/open-source/gitagent/configuration/models">
    See which provider each API key unlocks
  </Card>

  <Card title="Web & Voice" icon="browser" href="/open-source/gitagent/personal-assistant/web-voice">
    Use GITAGENT\_USERNAME and GITAGENT\_PASSWORD to secure the web UI
  </Card>

  <Card title="Integrations" icon="plug" href="/open-source/gitagent/data-integrations/integrations">
    Connect Composio, Telegram, and other services with these keys
  </Card>

  <Card title="Security" icon="gear" href="/open-source/gitagent/enterprise/security">
    Best practices for securing credentials and sandboxed runs
  </Card>
</CardGroup>