# ora platform API (agentic journeys / runs). Copy to `.env` and fill in.
# The public commands (audit, webmcp-audit, deep-journey, skill) use the public
# ora.ai host and need none of these — `ax audit <url>` works with zero
# configuration, and so does `ax webmcp-audit http://localhost:3000`.

# Secret API key (looks like ora_sk_...). Required by `journey` and by
# `audit --tunnel ora` (needs the tunnels:write + tunnels:connect scopes), which
# exchange it for a short-lived bearer token. `webmcp-audit` sends it as a bearer
# token to lift the anonymous ingest limits (10/min, 20 per 24h per IP); optional there.
ORA_API_KEY=

# Platform API base. Defaults to staging if unset.
ORA_PLATFORM_URL=https://api.agentfront.sh

# Public API base, used by audit, webmcp-audit, deep-journey and skill.
# Defaults to https://ora.ai if unset. Point it at a local ora to test against
# one (e.g. http://localhost:3000).
# ORA_API_URL=https://ora.ai

# Auditing a local target. `ora` opens ora's own tunnel (same as --tunnel ora;
# needs ORA_API_KEY above) - the tunnel is created, audited, and deleted.
# ORA_TUNNEL=ora

# ...or bring your own tunnel (same as --tunnel-cmd): a command that exposes the
# local server and prints its public https URL. Wins over ORA_TUNNEL when both are set.
# ORA_TUNNEL_CMD='ora tunnel 3000 --access public'
# ORA_TUNNEL_CMD='ngrok http 3000 --log stdout'

# ora-issued scan API key for `ax audit` (same as --api-key): exempts the
# caller from the scan rate limits (30/day + 6 force/day + 10/min burst).
# Issued manually by ora — no self-serve signup. Leave unset for normal use.
# `ax deep-journey` also accepts it as a partner-key fallback.
# ORA_SCAN_API_KEY=

# ora-issued partner API key for `ax deep-journey` (same as --api-key):
# unlocks free-text --task runs and the 1000 runs/24h keyed allowance
# (no per-target cap, no burst guard). Issued manually by ora.
# ORA_PARTNER_API_KEY=