Skip to main content
Agno reads configuration from environment variables. The ones you are most likely to need:
VariableUsed byPurpose
OPENAI_API_KEYSDKKey for the default model (OpenAIResponses) and the default OpenAIEmbedder
ANTHROPIC_API_KEY, GOOGLE_API_KEY, GROQ_API_KEY, …SDKEach model provider reads its own key. See the provider’s page in Models for the exact name
OS_SECURITY_KEYAgentOSBearer token for security key authentication
JWT_VERIFICATION_KEYAgentOSPublic key or shared secret for JWT verification
JWT_JWKS_FILEAgentOSPath to a JWKS file. Alternative to JWT_VERIFICATION_KEY
AGENTOS_URLCLIAgentOS URL for agno connect, agno status, and agno tokens
AGNO_ADMIN_TOKENCLIAdmin credential for agno connect and agno tokens. Falls back to OS_SECURITY_KEY
AGNO_DEBUGSDKSet to true to enable debug logging
AGNO_TELEMETRYSDKSet to false to disable telemetry

​
Setting a Variable

export OPENAI_API_KEY="sk-..."

$env:OPENAI_API_KEY = "sk-..."

set OPENAI_API_KEY=sk-...
These last for the current shell session. To persist a variable, add the export line to your shell profile (~/.zshrc, ~/.bashrc, or your PowerShell profile), or use setx on Windows.

​
Next Steps