Configuration

SDK Environment Variables

Variable	Default	Description
`AGENT_CONTROL_URL`	`http://localhost:8000`	Server URL
`AGENT_CONTROL_API_KEY`	—	API key for authentication

For server database configuration, use the AGENT_CONTROL_DB_* variables in the server section below.

Server Environment Variables

Core Settings

Variable	Default	Description
`HOST`	`0.0.0.0`	Server bind address
`PORT`	`8000`	Server port
`DEBUG`	`false`	Enable debug mode
`API_VERSION`	`v1`	API version prefix
`API_PREFIX`	`/api`	API path prefix

CORS

Variable	Default	Description
`CORS_ORIGINS`	`*`	Allowed origins (comma-separated)
`ALLOW_METHODS`	`*`	Allowed HTTP methods
`ALLOW_HEADERS`	`*`	Allowed headers

Database

Variable	Default	Description
`AGENT_CONTROL_DB_URL`	—	Preferred database URL. Supports PostgreSQL and SQLite (for example `sqlite+aiosqlite:///./agent_control.db`).
`AGENT_CONTROL_DB_HOST`	`localhost`	PostgreSQL host when `AGENT_CONTROL_DB_URL` is unset
`AGENT_CONTROL_DB_PORT`	`5432`	PostgreSQL port when `AGENT_CONTROL_DB_URL` is unset
`AGENT_CONTROL_DB_USER`	`agent_control`	Database user when `AGENT_CONTROL_DB_URL` is unset
`AGENT_CONTROL_DB_PASSWORD`	`agent_control`	Database password when `AGENT_CONTROL_DB_URL` is unset
`AGENT_CONTROL_DB_DATABASE`	`agent_control`	Database name when `AGENT_CONTROL_DB_URL` is unset
`AGENT_CONTROL_DB_DRIVER`	`psycopg`	Database driver when `AGENT_CONTROL_DB_URL` is unset

Observability

Variable	Default	Description
`OBSERVABILITY_ENABLED`	`true`	Enable observability pipeline
`OBSERVABILITY_FLUSH_INTERVAL_SECONDS`	`10`	Flush interval for observability events

Evaluators

Variable	Default	Description
`GALILEO_API_KEY`	—	API key for Luna-2 evaluator
`PROMETHEUS_METRICS_PREFIX`	`agent_control_server`	Metrics prefix for Prometheus exports

Authentication

Agent Control supports API key authentication for production deployments. For provider-based management auth, HTTP upstream authorization, namespace scoping, and runtime JWT claims, see the Authentication reference.

Variable	Default	Description
`AGENT_CONTROL_API_KEY_ENABLED`	`false`	Master toggle for authentication
`AGENT_CONTROL_API_KEYS`	—	Comma-separated list of valid API keys
`AGENT_CONTROL_ADMIN_API_KEYS`	—	Comma-separated list of admin API keys

Usage

Include the API key in the X-API-Key header:

curl -H "X-API-Key: your-api-key" http://localhost:8000/api/v1/agents

With the Python SDK:

from agent_control import AgentControlClient

# Via constructor

async with AgentControlClient(api_key="your-api-key") as client:
    await client.health_check()

# Or via environment variable

# export AGENT_CONTROL_API_KEY="your-api-key"

async with AgentControlClient() as client:
    await client.health_check()

Access Levels

Endpoint	Required Level
`/health`	Public (no auth)
All `/api/v1/*`	API key required

Key Rotation

Agent Control supports multiple API keys for zero-downtime rotation:

Add new key to AGENT_CONTROL_API_KEYS (e.g., key1,key2,new-key)
Deploy the server
Update clients to use the new key
Remove the old key from the variable
Redeploy

UI Environment Variables

Variable	Default	Description
`NEXT_PUBLIC_API_URL`	`http://localhost:8000`	Backend API URL

Database Setup

Agent Control uses PostgreSQL. The easiest way to run it locally:

cd server
docker compose up -d          # Start PostgreSQL
make alembic-upgrade          # Run migrations

Default credentials in docker-compose:

User: agent_control
Password: agent_control
Database: agent_control
Port: 5432

Getting Started

Concepts

How-to Guides

Integrations

Third-Party Agents

Examples

Reference

Configuration

SDK Environment Variables

Server Environment Variables

Core Settings

CORS

Database

Observability

Evaluators

Authentication

Configuration

Usage

Access Levels

Key Rotation

UI Environment Variables

Database Setup

​SDK Environment Variables

​Server Environment Variables

​Core Settings

​CORS

​Database

​Observability

​Evaluators

​Authentication

​Configuration

​Usage

​Access Levels

​Key Rotation

​UI Environment Variables

​Database Setup

SDK Environment Variables

Server Environment Variables

Core Settings

CORS

Database

Observability

Evaluators

Authentication

Configuration

Usage

Access Levels

Key Rotation

UI Environment Variables

Database Setup