Environment variables
Every environment variable DepWall reads, and what each one changes.
| Variable | Effect |
|---|---|
ANTHROPIC_API_KEY | Deep scan via a billed key instead of your CLI subscription. |
ANTHROPIC_AUTH_TOKEN | Alternative to the API key. |
DEPWALL_JUDGE_CMD | Judge via any other CLI, e.g. "codex exec". Overrides auto-detection. |
DEPWALL_NO_CLI_JUDGE | Never spawn an agent CLI to judge (also set for the child, to stop recursion). |
DEPWALL_CLOUD_URL | Shared verdict cache. Unset = fully local. |
DEPWALL_CLOUD_PUBKEY | Pinned key(s) for verifying cloud verdicts. k1:<b64>,k2:<b64> |
DEPWALL_REGISTRY_ALLOWLIST | Trusted internal registry hosts, comma-separated. |