Environment variables
Environment credentials take precedence over stored credentials; reserved relay and test variables below do not configure a normal terminal session.
| Variable | Default or values | What it does | See |
|---|---|---|---|
TATU_HOME |
~/.tatu |
Change the state directory for settings, credentials, sessions and other saved files. | Files and folders |
TATU_NO_MODEL_REFRESH |
Unset; any nonempty value disables refresh | Skip network refreshes of the model catalog. | Privacy |
TATU_NO_UPDATE_CHECK |
Unset; any nonempty value disables checks | Skip the interactive startup update check. | Install and update |
TATU_DOWNLOAD_URL |
https://get.tatu.codes |
Override the download site for updates and version checks. | Install and update |
TATU_DAEMON_ROOT |
Global daemon.root, then remote/daemon.json |
Folder where the daemon opens sessions; a daemon -root flag wins. |
Daemon |
TATU_DAEMON_MAX_SESSIONS |
remote/daemon.json, then 8 |
Maximum sessions the daemon keeps open; -max-sessions wins. |
Daemon |
TATU_REMOTE_RELAY_URL |
wss://relay.tatu.codes after setup; otherwise unset |
Override the remote connection address. | Set up and pair |
TATU_REMOTE_MACHINE_NAME |
Stored machine name, then hostname | Override this computer’s displayed name. | Set up and pair |
TATU_REMOTE_AUTO_START |
Stored preference; on when an address is supplied through the environment | Override automatic connection: 1, true, yes, on or 0, false, no, off. |
Set up and pair |
TATU_REMOTE_E2E |
On; 0, false, no or off turns it off |
Whether the phone and other terminals talk to this computer through the encrypted channel. Off is the old way, which the relay can read; use it only to keep an older app working while you update. | Set up and pair |
TATU_REMOTE_PUSH_ALWAYS |
Unset; 1 enables |
Send push notifications even while you are active on the Mac; Android push has not been tried on a device. | Set up and pair |
TATU_REMOTE_SESSION_ID |
Generated ID | Override the running agent’s remote ID when valid; a daemon-assigned ID wins. This is not a saved conversation ID. | Apps and other computers |
TATU_PROJECT_DIR |
Supplied to hook processes | Absolute working directory of the project for a hook. | Hooks |
TATU_SESSION_ID |
Supplied to hook processes when available | Current saved session ID for a hook. | Hooks |
ANTHROPIC_API_KEY |
No key | Anthropic API credential. | Sign in |
DEEPSEEK_API_KEY |
No key | DeepSeek API credential. | Sign in |
OPENAI_API_KEY |
No key | OpenAI API credential; not the ChatGPT subscription sign-in. | Sign in |
OPENROUTER_API_KEY |
No key | OpenRouter API credential. | Sign in |
COPILOT_GITHUB_TOKEN |
No token | A GitHub token with Copilot access; Tatu trades it for a Copilot token in memory. | Sign in |
XAI_API_KEY |
No key | xAI API credential. | Sign in |
MINIMAX_API_KEY |
No key | MiniMax API credential. | Sign in |
MINIMAX_CN_API_KEY |
No key | MiniMax (China) API credential. | Sign in |
FIREWORKS_API_KEY |
No key | Fireworks API credential. | Sign in |
ANT_LING_API_KEY |
No key | Ant Ling API credential. | Sign in |
BASETEN_API_KEY |
No key | Baseten API credential. | Sign in |
CEREBRAS_API_KEY |
No key | Cerebras API credential. | Sign in |
GROQ_API_KEY |
No key | Groq API credential. | Sign in |
HF_TOKEN |
No key | Hugging Face API credential. | Sign in |
KIMI_API_KEY |
No key | Kimi For Coding API credential. | Sign in |
KIMI_CODE_OAUTH_HOST |
https://auth.kimi.com |
Server for the Kimi Code subscription sign-in and renewal; KIMI_OAUTH_HOST is read when this is not set. |
Sign in |
META_API_KEY |
No key | Meta API credential. | Sign in |
MOONSHOT_API_KEY |
No key | Moonshot AI and Moonshot AI (China) API credential. | Sign in |
NVIDIA_API_KEY |
No key | NVIDIA API credential. | Sign in |
OPENCODE_API_KEY |
No key | OpenCode Zen and OpenCode Go API credential. | Sign in |
QWEN_TOKEN_PLAN_API_KEY |
No key | Qwen Token Plan and Qwen Token Plan (Individual) API credential. | Sign in |
QWEN_TOKEN_PLAN_CN_API_KEY |
No key | Qwen Token Plan (China) API credential. | Sign in |
TOGETHER_API_KEY |
No key | Together API credential. | Sign in |
AI_GATEWAY_API_KEY |
No key | Vercel AI Gateway API credential. | Sign in |
XIAOMI_API_KEY |
No key | Xiaomi API credential. | Sign in |
XIAOMI_TOKEN_PLAN_AMS_API_KEY |
No key | Xiaomi Token Plan (Amsterdam) API credential. | Sign in |
XIAOMI_TOKEN_PLAN_CN_API_KEY |
No key | Xiaomi Token Plan (China) API credential. | Sign in |
XIAOMI_TOKEN_PLAN_SGP_API_KEY |
No key | Xiaomi Token Plan (Singapore) API credential. | Sign in |
ZAI_API_KEY |
No key | Z.AI API credential. | Sign in |
ZAI_CODING_CN_API_KEY |
No key | Z.AI Coding (China) API credential. | Sign in |
LITELLM_API_KEY |
No key | API key of your LiteLLM proxy. | Sign in |
LITELLM_BASE_URL |
No address | Address of your LiteLLM proxy; wins over the one /login stored. |
Sign in |
FIRECRAWL_API_KEY |
Optional | Raise Firecrawl service limits. | The web |
PARALLEL_API_KEY |
Optional | Raise Parallel service limits. | The web |
EXA_API_KEY |
Optional | Raise Exa service limits. | The web |
JINA_API_KEY |
Optional | Raise Jina service limits. | The web |
TATU_RELAY_BIND |
Reserved for the relay service | Service bind address; not a session setting. | — |
TATU_RELAY_PORT |
Reserved for the relay service | Service port; not a session setting. | — |
TATU_RELAY_DATA |
Reserved for the relay service | Service storage location; not your session state directory. | — |
TATU_RELAY_MAX_FRAME_MIB |
Reserved for the relay service | Service message-size limit. | — |
TATU_RELAY_RATE_LIMIT |
Reserved for the relay service | Service message limit per connection. | — |
TATU_RELAY_SESSION_RATE_LIMIT |
Reserved for the relay service | Service session message limit. | — |
TATU_RELAY_DEVICE_RATE_LIMIT |
Reserved for the relay service | Service message limit for a paired device. | — |
TATU_RELAY_DEVICE_BYTE_LIMIT_MIB |
Reserved for the relay service | Service data limit for a paired device. | — |
TATU_RELAY_SESSION_BYTE_LIMIT_MIB |
Reserved for the relay service | Service data limit for a session. | — |
TATU_RELAY_MAX_PACE_MS |
Reserved for the relay service | Service wait before a message over the limit is refused. | — |
TATU_RELAY_RATE_WINDOW_MS |
Reserved for the relay service | Service rate-limit time window. | — |
TATU_RELAY_FCM_CREDENTIALS |
Reserved for the relay service | Service push credential file; not a provider credential. | — |
TATU_TEST_CHILD |
Reserved for automated tests | Select a simulated child process in tests; not a user setting. | — |
TATU_E2E_OVERFLOW |
Reserved for automated tests | Gate for tests that use real providers and can cost money; not a user setting. | — |