Skip to main content
The Environment variables panel on an agent’s page holds values the agent can read at runtime: a token for a service you want it to reach, an account id, a webhook URL.

​
How they behave

Write-only

A value is stored encrypted and is never displayed again. You can replace it or remove it; you cannot read it back.

Applied on redeploy

The agent reads its environment at startup. A variable added to a running agent takes effect the next time the container is replaced.
The panel says which of the two happened after you save: “Saved” or “Saved. Redeploy the agent for it to take effect.”

​
Naming

Names follow the usual environment-variable convention — letters, digits and underscores. The agent reads them the way any process reads its environment.
A variable removed here is gone from the agent only after the next redeploy. If you are rotating a leaked credential, revoke it at the service that issued it as well — removing it from this list does not reach into a container that is already running with it.

​
What not to put here

The model provider key is not one of these. It is set in Model and key, where the platform can also stop it spending. A provider key pasted into an environment variable is a key with no ceiling on it.
Last modified on August 31, 2026