.env.example

# Cortex local backend
# Copy to .env only when you run the backend outside the packaged macOS app.

# Local API auth. Use a long random token. The packaged app generates one.
CORTEX_API_KEY=replace-with-a-long-random-token

# Only set this when intentionally running local development scripts with the
# sample dev-local-key token.
CORTEX_ALLOW_INSECURE_DEV_TOKEN=0

# Optional MCP auth for local AI-tool integrations. REST endpoints still require
# CORTEX_API_KEY; /mcp accepts either the app token or this scoped MCP token.
CORTEX_MCP_API_KEY=
CORTEX_MCP_API_KEY_SCOPES=read,write,export,maintenance

# Optional local sync manifest signing. When set, device-bound
# /v1/sync/changes responses include an HMAC signature for integrity checks.
CORTEX_SYNC_SIGNING_KEY=

# Local backup retention. Count pruning is enabled by default; age pruning is
# opt-in because users may depend on older local recovery archives.
CORTEX_BACKUP_RETENTION_COUNT=20
CORTEX_BACKUP_RETENTION_DAYS=0

# Local vault and rebuildable SQLite index.
CORTEX_VAULT_PATH=./backend/data/Cortex.vault
CORTEX_DB_PATH=./backend/data/Cortex.vault/index.sqlite

# Dev server binding. Conductor workspaces can override CORTEX_PORT.
CORTEX_HOST=127.0.0.1
CORTEX_PORT=8766
CORTEX_PUBLIC_BASE_URL=http://127.0.0.1:8766
CORTEX_CORS_ORIGINS=http://127.0.0.1:8766,http://localhost:8766

# Optional extraction provider. If unset, Cortex uses deterministic local extraction.
ANTHROPIC_API_KEY=
CORTEX_EXTRACTION_MODEL=claude-opus-4-5

# Optional embedding provider. The default stays offline/local with a
# deterministic hash embedding; OpenAI can be enabled for higher recall.
CORTEX_EMBEDDING_PROVIDER=hash
CORTEX_EMBEDDING_MODEL=text-embedding-3-small
CORTEX_EMBEDDING_DIMENSIONS=384
CORTEX_EMBEDDING_STRICT=0
OPENAI_API_KEY=