COREBRAIN_API_URL | URL of your CORE instance, e.g. https://app.getcore.me. | Use the hosted instance URL, or your self-hosted domain. No trailing slash. |
COREBRAIN_API_KEY | A Personal Access Token (PAT) for your CORE workspace. | In the CORE webapp: avatar → Settings → API keys → New token. Copy the value once; it’s not shown again. |
COREBRAIN_GATEWAY_NAME | Display name for this gateway, e.g. railway-prod. | Pick anything. Shows up in Sidebar → Gateways so you can tell multiple gateways apart. |
COREBRAIN_GATEWAY_SECURITY_KEY | Recommended: pin your own value here. | Generate with echo "gwk_$(openssl rand -base64 32 | tr -d '=' | tr '/+' '_-')" and paste the same value here and into the CORE app later. If you leave it blank, the gateway generates one on first boot and prints it to the deploy logs (banner: CoreBrain Gateway, security key generated). |
GITHUB_TOKEN | A GitHub Personal Access Token. | Required by the template, but only used if the gateway will clone private repos or commit on your behalf. Create at github.com/settings/tokens → classic, scopes repo + read:user. Fine-grained PATs also work (Contents: Read & write, plus Account → Profile: Read-only). If you don’t need private-repo access, paste any valid PAT; the gateway boots either way. |
ANTHROPIC_API_KEY (optional) | API key for Anthropic. | Lets claude-code skip the OAuth login flow. Get it at console.anthropic.com. Skip if you’ll log Claude Code in manually later. |
OPENAI_API_KEY (optional) | API key for OpenAI. | Lets codex-cli skip OAuth. Get it at platform.openai.com/api-keys. |
CLAUDE_CODE_OAUTH_TOKEN (optional) | OAuth token for Claude Code. | Alternative to ANTHROPIC_API_KEY if you already have an OAuth token from a prior claude login. |