Environment variables
Environment variables configure script and service behavior, enabling dynamic execution across different environments.
Retrieve environment variables from a script via the Contextual tab on the Variable page, or use “+Context Var” when creating a script.
List of environment variables
Section titled “List of environment variables”| Name | Default | Description | Scope |
|---|---|---|---|
| DATABASE_URL | — | Postgres database URL | All |
| WORKER_GROUP | default | Worker group assignment and configuration source | Worker |
| MODE | standalone | Binary mode (standalone, worker, server, agent) | All |
| METRICS_ADDR | None | Socket address for Prometheus metrics exposure (EE only) | All |
| JSON_FMT | false | Output logs in JSON format | All |
| BASE_URL | http://localhost:8000 | Public instance access URL | Server |
| ZOMBIE_JOB_TIMEOUT | 30 | Timeout (seconds) before job marked as zombie | Server |
| RESTART_ZOMBIE_JOBS | true | Restart zombie jobs in-place or fail them | Server |
| SLEEP_QUEUE | 50 | Milliseconds between job queue checks | Worker |
| NATIVE_MODE | false | Enable native job processing with subworkers | Worker |
| KEEP_JOB_DIR | false | Preserve job directory after completion | Worker |
| ENABLE_UNSHARE_PID | false | Enable PID namespace isolation (Linux only) | Worker |
| DISABLE_NSJAIL | true | NSJAIL sandboxing status | Worker |
| LICENSE_KEY | None | Enterprise Edition license key | Worker |
| SLACK_SIGNING_SECRET | None | Slack app signing secret | Server |
| COOKIE_DOMAIN | None | Cookie domain setting | Server |
| DENO_PATH | /usr/bin/deno | Deno binary path | Worker |
| PYTHON_PATH | /usr/local/bin/python3 | Python binary path | Worker |
| GO_PATH | /usr/bin/go | Go binary path | Worker |
| DATABASE_CONNECTIONS | 50/3 | Max database connection pool size | All |
| SUPERADMIN_SECRET | None | Token for virtual superadmin access | Server |
| TIMEOUT_WAIT_RESULT | 20 | Seconds to wait on ‘run_wait_result’ endpoint | Worker |
| QUIET | false | Suppress verbose worker logs in production | Worker |
| ORVANTA_DIR | /tmp/orvanta | Base directory for temporary job files | Worker |
Contextual variables
Section titled “Contextual variables”Orvanta automatically sets contextual variables providing implicit credentials and execution context:
| Name | Example | Description |
|---|---|---|
| WM_WORKSPACE | demo | Current script’s workspace ID |
| WM_TOKEN | q1E2qcLyO00yxioll7oph76N9CJDqn | Ephemeral token with equivalent run permissions |
| WM_EMAIL | user@example.com | Executing user’s email |
| WM_USERNAME | ruben | Executing user’s username |
| WM_BASE_URL | https://app.orvanta.cloud/ | Instance base URL |
| WM_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Current script’s job ID |
| WM_JOB_PATH | u/user/script_path | Script or flow execution path |
| WM_FLOW_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Encapsulating flow’s job ID |
| WM_WORKER_GROUP | default | Job execution worker group name |
Custom contextual variables
Section titled “Custom contextual variables”Workspace admins can create custom contextual variables functioning as environment variables for all workspace jobs. User-defined variables are recommended for most cases.
Custom environment variables
Section titled “Custom environment variables”In self-hosted environments, scripts can access custom environment variables set before execution. This supports libraries requiring environment variables during initialization. Format: <KEY>=<VALUE>.
Environment variables passed to jobs
Section titled “Environment variables passed to jobs”Worker groups support static and dynamic environment variables passed to handled jobs. Dynamic values load from the worker host environment, while static values are set directly.