Skip to main content
Most day-to-day configuration — model provider, API keys, storage — is done in the web app under Settings → Providers, not through environment variables. Env vars matter mainly at deploy time: ports, security keys, and bootstrap values.

​
Server basics

​
Security and auth

Losing STUDIOGRAPH_MASTER_KEY means permanently losing everything in the encrypted secrets store — there is no recovery path. Keep a copy somewhere safe outside the server.

​
Model provider

Set either ANTHROPIC_API_KEY alone, or the MODEL_PROVIDER / MODEL_ID / MODEL_API_KEY trio. Both can also be configured after boot in Settings → Providers.

​
Rendering

See Railway for how these fit a managed deployment.

​
Where settings live

  • workspace.json (in .studiograph/) — committed workspace metadata: team name, storage layout, model provider and model, R2 bucket metadata, search settings, server URL.
  • The encrypted secrets store (secrets.db) — authoritative for credentials. Manage it via the web app’s Settings UI, or from the CLI with studiograph admin secrets set and studiograph admin settings set.
  • ~/.studiograph/user.json — a local fallback and mirror for credentials on the machine running the CLI.