Skip to content
Cisco AI Defense logo
CiscoAI Security

Environment variables — DefenseClaw

Overview

DefenseClaw reads a long tail of environment variables:

  • Runtime knobs (DEFENSECLAW_HOME, DEFENSECLAW_ENV, …).
  • Provider credentials proxied by the guardrail (OPENAI_API_KEY, ANTHROPIC_API_KEY, …).
  • Sink auth tokens (SPLUNK_HEC_TOKEN, OTEL_EXPORTER_OTLP_HEADERS, …).
  • Feature flags toggled for local dev and CI.

This page is auto-generated by walking Python os.getenv, Click envvar=, and Go os.Getenv / os.LookupEnv call-sites under cli/, internal/, cmd/, extensions/, scripts/, and observability/.

Reference

Auto-discovered across cli/, internal/, cmd/, extensions/, scripts/, and observability/. Total variables: 52.

DefenseClaw

VariableReferenced in
DEFENSECLAW_ANTHROPIC_PROBE_MODELdefenseclaw/commands/cmd_doctor.py
DEFENSECLAW_BINscanner/plugin_test.go
DEFENSECLAW_CUSTOM_PROVIDERS_PATHconfigs/embed.go
DEFENSECLAW_DEBUGgateway/client.go
DEFENSECLAW_GATEWAY_BINdefenseclaw/gateway.py, tests/test_gateway.py
DEFENSECLAW_HOMEconfig/defaults.go, defenseclaw/commands/cmd_setup.py, defenseclaw/commands/cmd_setup_local_observability.py (+3 more)
DEFENSECLAW_INTEGRATION_ENABLEDdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/emit_product_telemetry_usage_summary.py
DEFENSECLAW_JSONL_DISABLEgateway/sidecar.go
DEFENSECLAW_JUDGE_TRACEgateway/llm_judge.go
DEFENSECLAW_LLM_DEBUGdefenseclaw/llm.py
DEFENSECLAW_LLM_KEYtests/test_llm_env.py
DEFENSECLAW_LLM_MODELtests/test_config.py
DEFENSECLAW_OVERLAY_ROOTdefenseclaw/commands/cmd_setup_provider.py, tests/test_cmd_setup_provider.py
DEFENSECLAW_PERSIST_JUDGEgateway/sidecar.go
DEFENSECLAW_PROXY_TOKENtest-proxy-sandbox.py
DEFENSECLAW_REFdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
DEFENSECLAW_RUN_IDaudit/store.go, defenseclaw/db.py, defenseclaw/logger.py (+3 more)
DEFENSECLAW_SCHEMA_VALIDATIONgateway/sidecar.go
DEFENSECLAW_SIDECAR_DIAGcli/sidecar.go
DEFENSECLAW_SIDECAR_URLdefenseclaw/_data/skills/codeguard/main.py
DEFENSECLAW_WEBHOOK_ALLOW_LOCALHOSTdefenseclaw/webhooks/writer.py, gateway/webhook.go, gateway/webhook_e2e_test.go (+1 more)
DEFENSECLAW_WEBHOOK_DEBUGgateway/webhook.go

OpenClaw

VariableReferenced in
OPENCLAW_GATEWAY_TOKENdefenseclaw/commands/cmd_doctor.py, defenseclaw/commands/cmd_setup_provider.py, defenseclaw/config.py (+1 more)

Splunk

VariableReferenced in
SPLUNK_ACCESS_TOKENdefenseclaw/commands/cmd_setup.py
SPLUNK_IMAGEdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
SPLUNK_VERSIONdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/emit_product_telemetry_usage_summary.py, defenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py

OpenAI provider

VariableReferenced in
OPENAI_API_KEYgateway/provider_bifrost_e2e_test.go, tests/test_llm_env.py, tests/test_scanners.py

Anthropic provider

VariableReferenced in
ANTHROPIC_API_KEYtests/test_llm_env.py
ANTHROPIC_AUTH_TOKENtests/test_llm_env.py

LiteLLM

VariableReferenced in
LITELLM_MASTER_KEYtest-proxy-sandbox.py
LITELLM_PORTtest-proxy-sandbox.py

Miscellaneous

VariableReferenced in
AI_DEFENSE_API_KEYtests/test_scanners.py
BIFROST_API_KEYgateway/provider_bifrost_e2e_test.go, gateway/provider_bifrost_test.go
COLUMNStests/test_cmd_mcp.py, tests/test_cmd_misc.py, tests/test_cmd_skill.py
GH_TOKENdefenseclaw/commands/cmd_upgrade.py
GITHUB_TOKENdefenseclaw/commands/cmd_upgrade.py
GUARDRAIL_PORTtest-proxy-sandbox.py
NEMOCLAW_REFdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
PHONE_HOME_ENABLEDdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/emit_product_telemetry_usage_summary.py, defenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
PHONE_HOME_HEC_TOKENdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/emit_product_telemetry_usage_summary.py, defenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
PHONE_HOME_HEC_URLdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/emit_product_telemetry_usage_summary.py, defenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
PHONE_HOME_INSTANCE_IDdefenseclaw/_data/splunk_local_bridge/splunk/apps/defenseclaw_local_mode/bin/product_telemetry_sender.py
SIDECAR_PORTtest-proxy-sandbox.py
SKILL_SCANNER_LLM_API_KEYdefenseclaw/scanner/skill.py, tests/test_scanners.py
SKILL_SCANNER_LLM_MODELtests/test_scanners.py
SUDO_USERdefenseclaw/commands/cmd_init_sandbox.py, defenseclaw/commands/cmd_setup_sandbox.py, defenseclaw/config.py
TENANT_A_KEYtests/test_llm_env.py
TEST_CISCO_KEY_XYZtests/test_config.py
TEST_CISCO_RESOLVE_XYZtests/test_scanners.py
TEST_LLM_KEY_PRECtests/test_config.py
TEST_LLM_KEY_XYZtests/test_config.py
VIRUSTOTAL_API_KEYtests/test_scanners.py

Related