Environment variables
Environment variables configure script and service behavior, enabling dynamic execution across different environments.
Retrieve environment variables from a script via the Contextual tab on the Variable page, or use “+Context Var” when creating a script.
List of environment variables
Section titled “List of environment variables”| Name | Default | Description | Scope |
|---|---|---|---|
| DATABASE_URL | — | Postgres database URL | All |
| WORKER_GROUP | default | Worker group assignment and configuration source | Worker |
| MODE | standalone | Binary mode (standalone, worker, server, agent) | All |
| METRICS_ADDR | None | Socket address for Prometheus metrics exposure (EE only) | All |
| JSON_FMT | false | Output logs in JSON format | All |
| BASE_URL | http://localhost:8000 | Public instance access URL | Server |
| ZOMBIE_JOB_TIMEOUT | 30 | Timeout (seconds) before job marked as zombie | Server |
| RESTART_ZOMBIE_JOBS | true | Restart zombie jobs in-place or fail them | Server |
| SLEEP_QUEUE | 50 | Milliseconds between job queue checks | Worker |
| NATIVE_MODE | false | Enable native job processing with subworkers | Worker |
| KEEP_JOB_DIR | false | Preserve job directory after completion | Worker |
| ENABLE_UNSHARE_PID | false | Enable PID namespace isolation (Linux only) | Worker |
| DISABLE_NSJAIL | true | NSJAIL sandboxing status | Worker |
| LICENSE_KEY | None | Enterprise Edition license key | Worker |
| SLACK_SIGNING_SECRET | None | Slack app signing secret | Server |
| COOKIE_DOMAIN | None | Cookie domain setting | Server |
| DENO_PATH | /usr/bin/deno | Deno binary path | Worker |
| PYTHON_PATH | /usr/local/bin/python3 | Python binary path | Worker |
| GO_PATH | /usr/bin/go | Go binary path | Worker |
| DATABASE_CONNECTIONS | 50/3 | Max database connection pool size | All |
| SUPERADMIN_SECRET | None | Token for virtual superadmin access | Server |
| TIMEOUT_WAIT_RESULT | 20 | Seconds to wait on ‘run_wait_result’ endpoint | Worker |
| QUIET | false | Suppress verbose worker logs in production | Worker |
| ORVANTA_DIR | /tmp/orvanta | Base directory for temporary job files | Worker |
Contextual variables
Section titled “Contextual variables”Orvanta automatically sets contextual variables providing implicit credentials and execution context:
| Name | Example | Description |
|---|---|---|
| OV_WORKSPACE | demo | Current script’s workspace ID |
| OV_TOKEN | q1E2qcLyO00yxioll7oph76N9CJDqn | Ephemeral token with equivalent run permissions |
| OV_EMAIL | user@example.com | Executing user’s email |
| OV_USERNAME | ruben | Executing user’s username |
| OV_BASE_URL | https://app.orvanta.cloud/ | Instance base URL |
| OV_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Current script’s job ID |
| OV_JOB_PATH | u/user/script_path | Script or flow execution path |
| OV_FLOW_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Encapsulating flow’s job ID |
| OV_ROOT_FLOW_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Innermost root flow’s job ID, if the job is a flow step |
| OV_ROOT_JOB_ID | 017e0ad5-f499-73b6-5488-92a61c5196dd | Root job’s ID |
| OV_FLOW_PATH | u/user/flow_path | Encapsulating flow’s path, if the job is a flow step |
| OV_FLOW_STEP_ID | a | Node id of the current step in a flow (e.g. a, b, f) |
| OV_SCHEDULE_PATH | u/user/schedule_path | Path of the schedule that triggered the job, if any |
| OV_SCHEDULED_FOR | 2014-11-28T12:45:59Z | UTC date-time the job was scheduled for, if triggered by a schedule |
| OV_PERMISSIONED_AS | u/ruben | Fully qualified (u/ or g/) owner name the job executes as |
| OV_STATE_PATH | u/user/script_path/user | State resource path unique to a script and its trigger |
| OV_OBJECT_PATH | script_path/manual/1732800000000_017e0ad5-f499-73b6-5488-92a61c5196dd | Unique execution path for the script or flow step, useful as a storage key in an external service |
| OV_WORKER_GROUP | default | Name of the worker group the job is running on |
| OV_RUNNABLE_ID | 017e0ad5f49973b6 | Hash of the script; useful as a cache key for runnable-specific caching |
| OV_END_USER_EMAIL | enduser@example.com | End user’s email; only set when the job was triggered from an app |
| OV_TESTED_RUNNABLE | script/u/user/script_path | Qualified path of the runnable that triggered a CI test; empty unless the job came from a CI test annotation |
Custom contextual variables
Section titled “Custom contextual variables”Workspace admins can create custom contextual variables functioning as environment variables for all workspace jobs. User-defined variables are recommended for most cases.
Custom environment variables
Section titled “Custom environment variables”In self-hosted environments, scripts can access custom environment variables set before execution. This supports libraries requiring environment variables during initialization. Format: <KEY>=<VALUE>.
Environment variables passed to jobs
Section titled “Environment variables passed to jobs”Worker groups support static and dynamic environment variables passed to handled jobs. Dynamic values load from the worker host environment, while static values are set directly.