.env.example

# OpenLegion credentials
# Copy this file to .env and fill in your API keys
#
# Two-tier credential system:
#   OPENLEGION_SYSTEM_  — System tier (LLM provider keys). Used by mesh proxy.
#                         Never accessible by agents.
#   OPENLEGION_CRED_    — Agent tier. Accessible based on allowed_credentials.
#
# LLM provider keys MUST use OPENLEGION_SYSTEM_ — the proxy only looks there.

# ── System-tier credentials (LLM providers) ──────────────────
OPENLEGION_SYSTEM_OPENAI_API_KEY=sk-your-key-here
# OPENLEGION_SYSTEM_ANTHROPIC_API_KEY=sk-ant-your-key-here
# OPENLEGION_SYSTEM_GROQ_API_KEY=gsk_your-key-here
# OPENLEGION_SYSTEM_GEMINI_API_KEY=
# OPENLEGION_SYSTEM_DEEPSEEK_API_KEY=
# OPENLEGION_SYSTEM_MOONSHOT_API_KEY=
# OPENLEGION_SYSTEM_XAI_API_KEY=
# OPENLEGION_SYSTEM_MINIMAX_API_KEY=

# Custom API base URLs (optional)
# OPENLEGION_SYSTEM_OPENAI_API_BASE=https://your-proxy.example.com/v1

# ── Agent-tier credentials (tools / services) ────────────────
# OPENLEGION_CRED_BRAVE_SEARCH_API_KEY=BSA...
# OPENLEGION_CRED_APOLLO_API_KEY=
# OPENLEGION_CRED_HUNTER_API_KEY=
# OPENLEGION_CRED_BRIGHTDATA_CDP_URL=wss://...