Modal Reference

Commands, customization, environment variables, and troubleshooting for the Modal template.

The Modal app is agentos, served as one always-warm container. Configuration lives in the agentos-secrets Modal secret, and the default provisioned database is a Neon Postgres project named agentos. To supply your own database, configure host, user, password, database name, and optional port as described on the deploy page.

Manage

TaskCommand
Deploy code changes./scripts/modal/redeploy.sh
Sync env variables./scripts/modal/env-sync.sh (defaults to .env.production; pass .env to sync that instead)
Tail logsmodal app logs agentos --follow
List apps and statusmodal app list
Tear down./scripts/modal/down.sh

down.sh --yes skips only the wrapper script's confirmation. It does not pass --yes to modal app stop, so Modal may still prompt while stopping the app.

modal_app.py pins min_containers=1 and max_containers=1. The always-warm container keeps the in-process scheduler and MCP streams alive, and the cap is the template’s scaling default. Postgres coordinates due-schedule claims across workers; multiple workers do not inherently double every scheduled run.

Production auth

Token-Based Authorization is on by default. Production startup requires JWT_VERIFICATION_KEY or a readable JWKS file at the container path in JWT_JWKS_FILE; otherwise the process exits.

Token-Based Auth gives you three things:

  1. Protected runtime access. Protected API routes require a valid credential. Health, discovery, and API documentation remain public; Slack and MCP OAuth have their own authentication flows.
  2. Per-request identity. Middleware validates the token and exposes its user_id, optional session_id, scopes, and claims to the request.
  3. Scope-based permissions. Token scopes control access to AgentOS routes and resources.

The template already sets AuthorizationConfig(user_isolation=True). Authenticated non-admin REST access is scoped to the principal; local dev mode disables scope enforcement and is open when no credentials are configured. This does not scope Platform Manager’s direct database tools to that REST identity. See User Isolation for the boundaries and admin exceptions.

To disable JWT authentication in a private deployment with another auth layer, set authorization=False, remove JWT_VERIFICATION_KEY and JWT_JWKS_FILE from the running service, and rebuild or redeploy the app as needed. Disabling scope enforcement alone does not remove JWT validation while those credentials remain configured. MCP OAuth remains enabled while MCP_CONNECT_SECRET is set.

Customize

Format, validate, and run evals

Run evals against a dedicated local test platform with no concurrent writers. The starter’s cleanup hooks remove components and learning state created during a case; concurrent application writes can be removed too. The same prerequisite applies to scheduled evals. See eval setup and isolation.

The host scripts require uv. The setup script creates a Python 3.14 venv:

./scripts/venv_setup.sh
source .venv/bin/activate
TaskCommand
Format./scripts/format.sh
Lint and type-check./scripts/validate.sh
Run smoke evalspython -m evals --tag smoke

./scripts/mcp_check.sh runs inside the container, so it needs no venv.

Environment variables

Initial provisioning forwards a selected set of bootstrap values. After deployment, apply custom AGENTOS_MCP_SIGNING_KEY, ENABLE_DEPLOY_CHECK, and EVALS_* settings with ./scripts/modal/env-sync.sh. The table describes runtime support, not a promise that up.sh forwards every setting.

VariableRequiredDefaultDescription
OPENAI_API_KEYYes-Models and embeddings.
RUNTIME_ENVNoprddev disables scope enforcement; configured JWT credentials still enable token validation. Compose sets it for local. Keep production on prd so scope enforcement remains enabled.
JWT_VERIFICATION_KEYProduction-Public key from os.agno.com. Quote the value so the multi-line PEM parses as one variable.
JWT_JWKS_FILEProduction-Path inside the Modal container to a JWKS file. The scripts put only this path into agentos-secrets. Put the file in the Docker build context or add an explicit Modal mount before deploying.
MCP_CONNECT_SECRETNogenerated by up.shOAuth consent secret (16+ chars) for connecting claude.ai and ChatGPT to /mcp. up.sh generates one on deploy and writes it to .env.production.
AGENTOS_MCP_SIGNING_KEYNogeneratedOptional high-entropy signing-key material (32+ chars) for OAuth tokens. Unset, a strong key is generated and persisted in the database. Rotating it invalidates outstanding tokens.
AGENTOS_URLNohttp://127.0.0.1:8000Scheduler base URL. up.sh sets it to your modal.run URL. Scheduled jobs never fire if it stays at the default in production. When MCP_CONNECT_SECRET is set, OAuth metadata also derives its public origin from this URL.
ENABLE_DEPLOY_CHECKNoTrueDaily deployment-check cron.
EVALS_TAGNosmokeEval tag the run-evals workflow runs.
EVALS_CASE_TIMEOUT_SECONDSNo90Fallback timeout for cases without an explicit timeout.
EVALS_SUITE_TIMEOUT_SECONDSNoderived from selected casesSum of selected case timeouts plus 30 seconds per case, with a 60-second floor. A positive integer overrides this ceiling.
PARALLEL_API_KEYNo-WebSearch uses the Parallel SDK when set, keyless MCP otherwise.
SLACK_BOT_TOKENNo-Set with the signing secret to enable Slack.
SLACK_SIGNING_SECRETNo-Set with the bot token to enable Slack.
DB_HOST / DB_PORT / DB_USER / DB_PASS / DB_DATABASENomatches composePostgres connection. up.sh fills these from your Neon project.
DB_DRIVERNopostgresql+psycopgSQLAlchemy driver.
NEON_PROJECT_IDNowritten by up.shIdentifies the Neon project so down.sh can delete it. env-sync.sh skips NEON_* keys; they never sync to the app.
NEON_ORG_IDNo-Neon organization for unattended deploys. neonctl projects create prompts for an org and hangs non-interactive runs; set it (find yours with neonctl orgs list) so up.sh can pass --org-id.
PGSSLMODENo-The deploy scripts set it to require in the Modal secret. Neon requires TLS, and libpq honors the variable, so the app needs no change.
AGNO_DEBUGNoFalseVerbose Agno logs. Compose sets it for dev.
WAIT_FOR_DBNoFalseIf True, the entrypoint blocks on the database before starting. Compose sets it.

Troubleshooting