Agents environment variables
Reference documentation for Retool Agents-related environment variables for self-hosted deployments.
Only configure environment variables when needed. You can configure many environment variables from your organization's Settings rather than directly editing your deployment's configuration file.
You must restart your instance after setting any variables for them to take effect.
Set agent sandbox environment variables on the agent-worker and agent-eval-worker containers. The AGENT_SANDBOX_* prefix is the preferred name for self-hosted operators. Each variable is also accepted under its AGENT_EXECUTOR_* alias for backward compatibility. When both forms are set, AGENT_SANDBOX_* takes precedence.
AGENT_EVALS_S3_ACCESS_KEY_ID
The Amazon S3 access key ID for running agent evals.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
Examples
AGENT_EVALS_S3_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
AGENT_EVALS_S3_BUCKET
The Amazon S3 bucket for running agent evals.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
Examples
AGENT_EVALS_S3_BUCKET=retool-agent-evals
AGENT_EVALS_S3_REGION
The Amazon S3 region for running agent evals.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
Examples
AGENT_EVALS_S3_REGION=us-west-2
AGENT_EVALS_S3_SECRET_ACCESS_KEY
The Amazon S3 secret access key for running agent evals.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
Examples
AGENT_EVALS_S3_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
AGENT_SANDBOX_ENCRYPTION_KEY
A 64-character hex string (256-bit key) used to encrypt credentials stored in the Agent Sandbox. Must match across the controller and proxy services. Also accepted as AGENT_EXECUTOR_ENCRYPTION_KEY for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
AGENT_SANDBOX_JWT_PRIVATE_KEY
PEM-encoded ES256 private key used to sign JWTs for Agent Sandbox authentication. Also accepted as AGENT_EXECUTOR_JWT_PRIVATE_KEY for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
AGENT_SANDBOX_JWT_PUBLIC_KEY
PEM-encoded ES256 public key used by Agent Sandbox services to verify JWTs issued by the Retool backend. Also accepted as AGENT_EXECUTOR_JWT_PUBLIC_KEY for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
AGENT_SANDBOX_POSTGRES_POOL_MAX
Maximum number of PostgreSQL connections in the Agent Sandbox connection pool. Also accepted as AGENT_EXECUTOR_POSTGRES_POOL_MAX for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | 10 |
Examples
AGENT_SANDBOX_POSTGRES_POOL_MAX=10
AGENT_SANDBOX_POSTGRES_SCHEMA
PostgreSQL schema used by the Agent Sandbox state store. Also accepted as AGENT_EXECUTOR_POSTGRES_SCHEMA for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | agent_executor |
Examples
AGENT_SANDBOX_POSTGRES_SCHEMA=agent_executor
AGENT_SANDBOX_POSTGRES_URL
PostgreSQL connection URL for Agent Sandbox state storage. Set STATE_BACKEND=postgres on the controller and proxy to use Postgres instead of the default Redis backend. Also accepted as AGENT_EXECUTOR_POSTGRES_URL for backward compatibility.
| Type | string |
| Configurability | Update the deployment's configuration file. |
| Required | Optional |
| Default | null |
Examples
AGENT_SANDBOX_POSTGRES_URL=postgresql://user:password@host:5432/dbname